3 ms·
Probably by emitting control sequences from the input files unfiltered to your terminal. Just guessing, but it's the one big thing that occurs to me when thinki
by slrz 11y ago
Probably by emitting control sequences from the input files unfiltered to your terminal. Just guessing, but it's the one big thing that occurs to me when thinking of an unsafe pager.
- omginternets 11y agoAh, okay that makes sense. Thanks!
- Someone 11y agoIt may be much, much worse. http://seclists.org/fulldisclosure/2014/Nov/74 http://seclists.org/fulldisclosure/2014/Nov/74: "Many Linux distributions ship with the 'less' command automagically interfaced to 'lesspipe'-type scripts, usually invoked via LESSOPEN. This is certainly the case for CentOS and Ubuntu. Unfortunately, many of these scripts appear to call a rather large number of third-party tools that likely have not been designed with malicious inputs in mind. On CentOS, lesspipe appears to include things such as groff + troff + grotty, man, and cpio. On Ubuntu, there's isoinfo (?!), ar from binutils, and so on. Ancient and obscure compression utilities and doc converters crop up, too." I vaguely remember a ?different? issue where less would load a shared library to list its symbols.