Caldera UnixWare/OpenUnix unescaped shell characters problem

2003-03-0400:00:00

BUGTRAQ

vulners.com

If | is used in filename shell comand may be executed by client on tertrieval.

CPENameOperatorVersion
open unixeq8.0
unixwareeq7.1

CPE	Name	Operator	Version
	open unix	eq	8.0
	unixware	eq	7.1

References

vulners.com/securityvulns/securityvulns:doc:4164