Re: Bug Reporting

[Pierre Gaston]

On Tue, Jun 9, 2015 at 11:16 AM, Avinash Thapa <acid.exploit@gmail.com> wrote:

Hi, I'll report the bug via email only.

In this, you are able to get the /etc/passwd file inside an error, this thing looks weird to me so I thought to report you this thing.

Just write in your terminal

bash -i '/etc/passwd'     and hit enter and you'll see the passwd file is shown as error,

Similarly if you have root privilages so write

bash -i '/etc/shadow'

you'll get shadow file as error. Please find the attached screenshot for the same. :)

Thanks,

Acid.

Well it tries to execute the file and show the lines where it gets an error, it's a useful behavior when you try to write a script.

If you have read access to these files and can run bash, you can print them anyway eg:

bash -c 'echo  "$(</etc/passwd)" '

so it's hardly a security issue.