Subject: Re: rdist(1) security bug from comp.security.unix
To: None <netbsd-bugs@sun-lamp.cs.berkeley.edu, wiserner@informatik.tu-muenchen.de>
From: Chris G. Demetriou <cgd@postgres.Berkeley.EDU>
List: netbsd-bugs
Date: 03/06/1994 15:41:17
it's not a bug in Net/2-derived systems that still use ash as the
/bin/sh.
ash apparently does something different than expected with sh -c,
and breaking up the command with the IFS.
cgd
------------------------------------------------------------------------------