shell script cgi

From: c jones (ojnes33at_private)
Date: Thu Nov 14 2002 - 10:10:32 PST

Next message: h2g.sec.listat_private: "Re: BIND Exploits"

Previous message: Dave Aitel: "Re: ColdFusion Heap Overflow"
Next in thread: Brian Hatch: "Re: shell script cgi"
Reply: Brian Hatch: "Re: shell script cgi"
Reply: Philip Rowlands: "Re: shell script cgi"
Reply: Rajko Zschiegner: "RE: shell script cgi"
Reply: Rajko Zschiegner: "Re: shell script cgi"
Reply: mlh: "Re: shell script cgi"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,

I have found the line below in an sh cgi program, and
believe I can pass a command to the shell but can't
seem to get it to work right. No matter what I try as
the HTTP_USER_AGENT it interprets it as a string in
the echo command & I can't get it to break it into a
new command. Nothing is done to HTTP_USER_AGENT before
this line...it's just reading it directly from the
environment.

Any help you may have is very much appreciated.

Thanks

ua=`echo "$HTTP_USER_AGENT" | sed "s#\;##g"`




__________________________________________________
Do you Yahoo!?
Yahoo! Web Hosting - Let the expert host your site
http://webhosting.yahoo.com

Next message: h2g.sec.listat_private: "Re: BIND Exploits"
Previous message: Dave Aitel: "Re: ColdFusion Heap Overflow"
Next in thread: Brian Hatch: "Re: shell script cgi"
Reply: Brian Hatch: "Re: shell script cgi"
Reply: Philip Rowlands: "Re: shell script cgi"
Reply: Rajko Zschiegner: "RE: shell script cgi"
Reply: Rajko Zschiegner: "Re: shell script cgi"
Reply: mlh: "Re: shell script cgi"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Nov 14 2002 - 14:44:15 PST