News for hackers. Stuff that matters.

A comment on Arbitrary file write vulnerability in GNU gzip's zgrep utility. Parent comment

Re:Arbitrary file write vulnerability in GNU gzip's zgrep ut... by asddubs on Monday April 18, 2022 @06:24PM (#31077412)
"--no-preserve-root" made me laugh. for testing unescaped calls to rm?
[ Parent | on HN ]
Re:Arbitrary file write vulnerability in GNU gzip's zgrep ut... by jamal-kumar on Monday April 18, 2022 @08:50PM (#31078596)
It's a bypass against a mitigation for an old trick which worked back in the day where you could watch someone self-nuke themselves off of IRC by convincing them to type rm -rf /
[ Parent | on HN ]
Re:Arbitrary file write vulnerability in GNU gzip's zgrep ut... by benibela on Tuesday April 19, 2022 @12:18PM (#31085220)
It is to mess with people calling rm * / in the directory

Good thing there is not really any reason to call rm like that

[ Parent | on HN ]
Re:Arbitrary file write vulnerability in GNU gzip's zgrep ut... by asddubs on Wednesday April 20, 2022 @03:55PM (#31102111)
oh does that actually work? the * expanding a filename to an argument? I guess it all just ends up in argv
[ Parent | on HN ]