Kelvin:

This is what's typically called a layer 8 issue, or PEBKAC. It just means that
you're failing to understand how bash works.

If you write a script that runs:

  #!/bin/bash
  sudo poweroff

Is that a vulnerability? No! The script does exactly what you wrote, that is,
to shutdown the machine.

So, if you write a script without properly quoting $@ and $*, if you use
`...` without regarding safety and other shell scripting pitfalls, is that a
vulnerability? No! It just means that you have to try harder and learn bash :)

-- 
Eduardo Bustamante
https://dualbus.me/

Reply via email to