Re: Troff dangerous.

From: Steven M. Bellovin (smbat_private)
Date: Mon Jul 26 1999 - 12:28:39 PDT

  • Next message: Bob Beck: "Re: Troff dangerous."

    In message <199907251418.KAA05569at_private>, John Robert LoVe
    rso writes:
    > This isn't a problem with "troff" or any of it's varients.  Instead,
    > this is an exploit purely with "groff", the GNU reimplementation.  Troff
    > doesn't have the file stream or ".pso" requests; those are purely part
    > of groff.
    >
    > Thus, this affects only systems with groff installed (all Linux and FreeBSD
    > systems, at least).
    >
    > John
    >
    Umm, not quite.  My 1976 (no, that's not a typo) nroff/troff manual has
    .pi -- pipe output to program; .sy is also ancient, and probably there since
    at least since 1977.  My 1981 addendum also lists .! as another way to do
    shell escapes.
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:53:39 PDT