Hi,

found something strange:

-
Workstation 0 ~> echo > --version
Workstation 0 ~> rm --version
rm (GNU fileutils) 3.16
Workstation 0 ~> rm "--version"
rm (GNU fileutils) 3.16
Workstation 0 ~> rm *ver*
rm (GNU fileutils) 3.16
-
( 3.16 is ported to debian 1.3 (bo) but i tested it on debian potato
and FreeBSD 3.3 too, with same result)

it is ok that it does not delete it when using 'rm --version' ,
but it should do it when using 'rm "--version"' or 'rm *ver*' i think.
basically it is not a big problem cause not many people use '--version'
as filename, but i think this can(?) be exploited to do somethink like
'rm -rf /' . Anyway it's kinda strange...

bye
mexy

Reply via email to