207 - Git Config Injection and a Sophos Pre-Auth RCE [Bug Bounty Podcast]

On this weeks bug bounty podcast we take a look at a few interesting issues. While they are all patched, there is reason to believe they'd all creep up in other applications too. First up is an RCE due to nested use of an escaped string. Second a fgets loop that doesn't account for long lines. A XML signature verification tool with a deceptive interface, and last a look at how Bash's privileged mode can backfire.

Links and vulnerability summaries …

applications auth bounty bug bug bounty git injection nested podcast rce sophos