X2Go Bug report logs - #335
Users can inject arbitrary data into Pyhoca-GUI via .bashrc

Received: (at submit) by bugs.x2go.org; 21 Oct 2013 12:41:43 +0000
From halbert@halwitz.org  Mon Oct 21 14:41:43 2013
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=-0.6 required=5.0 tests=BAYES_00,HTML_MESSAGE,
	RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DNSWL_BLOCKED autolearn=no version=3.3.2
X-Greylist: delayed 4199 seconds by postgrey-1.34 at ymir; Mon, 21 Oct 2013 14:41:42 CEST
Received: from smtp122.dfw.emailsrvr.com (smtp122.dfw.emailsrvr.com [67.192.241.122])
	by ymir (Postfix) with ESMTPS id DBE4A5DB16
	for <submit@bugs.x2go.org>; Mon, 21 Oct 2013 14:41:42 +0200 (CEST)
Received: from localhost (localhost.localdomain [127.0.0.1])
	by smtp12.relay.dfw1a.emailsrvr.com (SMTP Server) with ESMTP id 14F15300DC
	for <submit@bugs.x2go.org>; Sat, 19 Oct 2013 12:22:47 -0400 (EDT)
X-Virus-Scanned: OK
Received: from smtp66.iad3a.emailsrvr.com (smtp66.iad3a.emailsrvr.com [173.203.187.66])
	by smtp12.relay.dfw1a.emailsrvr.com (SMTP Server) with ESMTPS id E72D230335
	for <submit@bugs.x2go.org>; Sat, 19 Oct 2013 12:22:46 -0400 (EDT)
Received: from localhost (localhost.localdomain [127.0.0.1])
	by smtp1.relay.iad3a.emailsrvr.com (SMTP Server) with ESMTP id 07F02600BB;
	Sat, 19 Oct 2013 12:22:44 -0400 (EDT)
X-Virus-Scanned: OK
Received: from app40.wa-webapps.iad3a (relay.iad3a.rsapps.net [172.27.255.110])
	by smtp1.relay.iad3a.emailsrvr.com (SMTP Server) with ESMTP id DB48D600B8;
	Sat, 19 Oct 2013 12:22:43 -0400 (EDT)
Received: from halwitz.org (localhost.localdomain [127.0.0.1])
	by app40.wa-webapps.iad3a (Postfix) with ESMTP id 9C18F300044;
	Sat, 19 Oct 2013 12:22:43 -0400 (EDT)
Received: by beta.apps.rackspace.com
    (Authenticated sender: halbert@halwitz.org, from: halbert@halwitz.org) 
    with HTTP; Sat, 19 Oct 2013 12:22:43 -0400 (EDT)
Date: Sat, 19 Oct 2013 12:22:43 -0400 (EDT)
Subject: x2go client crashes if .bashrc prints anything
From: "Dan Halbert" <halbert@halwitz.org>
To: submit@bugs.x2go.org
MIME-Version: 1.0
Content-Type: multipart/alternative;boundary="----=_20131019122243000000_69938"
Importance: Normal
X-Priority: 3 (Normal)
X-Type: html
Message-ID: <1382199763.63727452@beta.apps.rackspace.com>
X-Mailer: webmail7.0