Re: LYNX-DEV VU#5135 (Lynx vulnerability?) (fwd)

[T.E.Dickey]

>     system("/bin/cp file1;/bin/sh; file2")       :(
>     system("exec /bin/cp file1;/bin/sh; file2")  :)
I believe that the discussion of 'exec' was referring to the family of
system calls (execl, execlp, etc), which require the application to parse
the command line into the argv array by itself.

-- 
Thomas E. Dickey
address@hidden
http://www.clark.net/pub/dickey
;
; To UNSUBSCRIBE:  Send a mail message to address@hidden
;                  with "unsubscribe lynx-dev" (without the
;                  quotation marks) on a line by itself.
;