On Tue, Jun 9, 2015 at 11:16 AM, Avinash Thapa <acid.expl...@gmail.com>
wrote:

> Hi, I'll report the bug via email only.
>
> In this, you are able to get the /etc/passwd file inside an error, this
> thing looks weird to me so I thought to report you this thing.
>
> Just write in your terminal
> bash -i '/etc/passwd'     and hit enter and you'll see the passwd file is
> shown as error,
>
> Similarly if you have root privilages so write
> bash -i '/etc/shadow'
>
> you'll get shadow file as error. Please find the attached screenshot for
> the same. :)
>
> Thanks,
> Acid.
>

Well it tries to execute the file and show the lines where it gets an
error, it's a useful behavior when you try to write a script.

If you have read access to these files and can run bash, you can print them
anyway eg:

bash -c 'echo  "$(</etc/passwd)" '

so it's hardly a security issue.

Reply via email to