OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: sperl 5.00503 (and newer ;) exploit
From: Joey Hess (joeyKITENET.NET)
Date: Mon Aug 07 2000 - 17:38:52 CDT

Olaf Kirch wrote:
> I'm sort of torn between whether to blame sperl for using mail rather
> than syslog, or for doing so without cleaning up the environment.
> Apart from the ~! expansion problem, there seems to be at least
> another one lurking which is that it'll try to load ~/.mailrc, and
> ~ is replaced with the value of $HOME.

... and you just have to set interactive in .mailrc. This works around
the patches I've seen for mailx that stop it from looking at the
environment for that variable.

Another fun one that doesn't require interactive be set at all is:

joeykite:~>echo hi > foo
joeykite:~>echo "please don't kill me" > important
joeykite:~>record=/home/joey/important mail joey < foo
You have new mail.
joeykite:~>cat important
please don't kill me