3 ms·
It might not be vulnerable, but any context where a user can pass environment variables might be dangerous. Eg, if you allow ANY environment variables in SSH r
by scott_karana 12y ago
It might not be vulnerable, but any context where a user can pass environment variables might be dangerous.
Eg, if you allow ANY environment variables in SSH rsync-only logins, or pass on any variables (for good or bad) in sudo scripts, etc.