No one expects command execution

Re:No one expects command execution by marcosdumay on Friday July 03, 2015 @12:49PM (#9826604)

Yes, it's unexpected and less commands should do that.

Did you read the manpage of every utility on your computers to know that they won't execute a user supplied program? If you didn't you are up to nasty surprises.

That $HOME trick alone would give privilege escalation to anybody that gets a user-level access to a server of mine. Gota change it.

[ Parent | on HN ]

Re:No one expects command execution by tokenizerrr on Friday July 03, 2015 @01:27PM (#9826806)

How so? I might be missing something but as far as I can tell it's just executing the runme.sh as the user who ran the bash command. It would be virtually identical to ./runme.sh

[ Parent | on HN ]