Re: [exim-dev] [Bug 2118] sendmail -be and ${run} macro security problem

Auteur: Andrew C Aitchison
Datum:
Aan: exim-dev
Onderwerp: Re: [exim-dev] [Bug 2118] sendmail -be and ${run} macro security problem

On Tue, 9 May 2017, admin@??? wrote:

> https://bugs.exim.org/show_bug.cgi?id=2118
>
> Jasen Betts <jasen@???> changed:
>
> What |Removed |Added > ---------------------------------------------------------------------------- > CC| |jasen@???

>
> --- Comment #7 from Jasen Betts <jasen@???> ---
> It looks to me like a "shell injection" flaw in wordpress.

Yes, but exim provides a language for the hacker to
modify the command after wordpress has sanitised it :-(

-- 
Andrew C Aitchison            Cambridge, UK

Deze boodschap maakt deel uit van devolgende draad:
	de volledige draad-boom gesorteerd op datum
	admin op
	admin op

Re: [exim-dev] [Bug 2118] sendmail -be and ${run} macro secu…