https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294497

            Bug ID: 294497
           Summary: Two typos in the SECURITY CONSIDERATION section of the
                    system function in libc
           Product: Documentation
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Manual Pages
          Assignee: [email protected]
          Reporter: [email protected]
                CC: [email protected]

int system(const char *string)

The system() function is easily misused in a manner that enables a malicious
user to run arbitrary command, because all meta-characters supported by sh(1)
would be honored.  User supplied parameters should always be carefully santized
before they appear in string.

two typos

to run arbitrary commands

OR

to run an arbitrary command


santized
=>
sanitized

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Reply via email to