[TUHS] shell escapes in utilities

Grant Taylor via TUHS tuhs at tuhs.org
Wed Aug 2 01:37:55 AEST 2023


On 8/1/23 12:47 AM, ron minnich wrote:
> I got to wondering, based on the sendmail discussions, how many shell 
> escapes have appeared over the years?

Please clarify what you mean by "shell escape".  I think that there are 
a LOT of programs that can shell out and run arbitrary commands while in 
the program.

Sudo also uses this phrasing for references to things like this.

Then there are abuses of shell escapes used as vulnerability / vectors 
to attack things.



Grant. . . .


More information about the TUHS mailing list