Strange sftp input parameter handling, user assisted code execution?

Damien Miller djm at mindrot.org
Wed Jun 18 07:20:48 EST 2008


On Tue, 17 Jun 2008, Roman Fiedler wrote:

> Hello list,
> 
> I use openssh-client 1:4.7p1-8ubuntu1.2. After authentication:
> 
> sftp> get !xxxx
> /bin/bash: xxxx: command not found
> Shell exited with status 127

Can you reproduce this with OpenSSH 5.0p1?

-d


More information about the openssh-unix-dev mailing list