> What about git-shell over ssh ? I guess that gives the same problem. The exploitation allows to execute arbitrary code, as you would do by launching commands

> What about git-shell over ssh ? I guess that gives the same problem. The exploitation allows to execute arbitrary code, as you would do by launching commands from, say, bash. I don't know git-shell, but I guess (from the manpage) it restricts the allowed commands. The exploitation of the bug would allow a malicious user to execute a command instead of git-shell. A good example of command could be /bin/bash.