Shell Call Security Disaster

Subtle problems occur with the shell
Hard to detect even in simple programs
Casual analysis was no good
We said ``It only runs finger.''
We were wrong: it also runs /bin/sh.
/bin/sh is very complicated!
This class isn't about CGI security, so I'll leave it at that