DIY Electronic projects
Git Vulnerability - Printable Version

+- DIY Electronic projects (https://forum.yu3ma.net)
+-- Forum: IT (https://forum.yu3ma.net/forumdisplay.php?fid=63)
+--- Forum: Sigurnost i zaštita (https://forum.yu3ma.net/forumdisplay.php?fid=64)
+--- Thread: Git Vulnerability (/showthread.php?tid=1677)

Git Vulnerability - vsavic - 08-15-2017

Nasli rupu u git-u dok dovlacite repozitorijum:
https://blogs.msdn.microsoft.com/vsoservice/?p=14655

Quote:When fetching from remote repositories, Git URL parsing can be confused by command line options embedded inside the URL. This can be exploited to pass specific command-line options to the ssh executable, and those options may specify a command to execute using its “ProxyCommand” functionality.


[Image: pwned-small1.gif]