3 ms·
I think if you have the ability to create new files on a remote host, you are already compromised. No need to wait for an Admin mistake.
by hartator 12y ago
I think if you have the ability to create new files on a remote host, you are already compromised. No need to wait for an Admin mistake.
- derekp7 12y agoThere are hosts with multiple users on them, who have some level of write access to somewhere on the filesystem. After all, Unix is a multi-user system, so it is not heard of to have multiple users on it. That being said, this article is just stating to be careful of wildcards when you are sitting in a user-owned (or user-writable, such as /tmp) directory.
- 0x0 12y agoNot necessarily, you could make a .zip/.tar file with filenames like these that could trip up the end user trying to clean up after unpacking.