MOTD string is escapable
Opened this issue · 0 comments
GoogleCodeExporter commented
What steps will reproduce the problem?
1. Connecting to a server that has a '\' as the last character of any line
in the MOTD
What is the expected output? What do you see instead?
MOTD should continue displaying, but instead will break right at this point
Please provide any additional information below.
I'm not sure whether this would allow someone to run some kind of remote
execution, but it seems that the string, once escaped, is still attempting
to be eval()uated, which I don't imagine is a very good thing.
Original issue reported on code.google.com by riley.m...@gmail.com on 24 May 2008 at 4:10