Open Source Zealots Dowplay Danger Of Perl Flaw On ZDNet Talkbacks

TalkBack 3 of 30:

Next »

« Previous

• Thread View
• Flat View

There is nothing wrong with your example

>printf "%s", "long string with $user supplied values";

is a perfectly legal Perl statement. That is the problem with Perl, there are too many different ways to do the same thing in Perl. That is not flexibility, it is poor design.

Webmin is not doing anything wrong and so the flaw is not in Webmin, it is an error in Perl.

I'd have to agree that it would be difficult to take advantage of this bug in order to compromise a system and that I would need to see a working example before I'd raise any red flags.

Posted by: balsover   Posted on: 11/30/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now
• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now