Tag Info

New answers tagged


Sudo blocks environment variables that might be bash function definitions (2004-11-11 env.c: strip exported bash functions from the environment), even if the variable name is whitelisted. That's why sudo isn't included in the list of common attack vectors for Shellshock. A bash script invoked by su to a restricted account can be an attack vector. But there ...


Many systems support the use of alias with a character such as +. So, makerofthings7+c6201404b8efbe@invalid-email.com would be equivalent to makerofthings7@invalid-email.com for the MDA (ie. they would end up in the same mailbox). Then, you keep a list of whitelisted tokens (maybe paired with the From header they must use): ...

Top 50 recent answers are included