News for hackers. Stuff that matters.
Re:Unix Wildcards Gone Wild by hartator on Sunday August 17, 2014 @04:20PM (#8190331)
I think if you have the ability to create new files on a remote host, you are already compromised. No need to wait for an Admin mistake.
Re:Unix Wildcards Gone Wild by derekp7 on Sunday August 17, 2014 @04:31PM (#8190362)
There are hosts with multiple users on them, who have some level of write access to somewhere on the filesystem. After all, Unix is a multi-user system, so it is not heard of to have multiple users on it. That being said, this article is just stating to be careful of wildcards when you are sitting in a user-owned (or user-writable, such as /tmp) directory.
Re:Unix Wildcards Gone Wild by 0x0 on Sunday August 17, 2014 @04:35PM (#8190376)
Not necessarily, you could make a .zip/.tar file with filenames like these that could trip up the end user trying to clean up after unpacking.