“By crafting hostnames with shell escape characters, arbitrary
commands can be executed in a root environment when a display
manager reads in the resource database via xrdb.
Get the Free Newsletter!
Subscribe to Developer Insider for top news, trends, & analysis