CVSROOT: /cvs Module name: src Changes by: mill...@cvs.openbsd.org 2014/12/16 11:31:06
Modified files:
usr.bin/mail : fio.c
Log message:
Use glob() to expand filenames instead of passing it to the shell's
echo command for expansion which could result in arbitrary command
execution. CVE-2004-2771
