Four thousand bytes of malloc'd hope and then `sprintf` just starts writing wherever it damn well feels. Real nice cherry on top to hand that buffer straight to `system`, because nothing says secure shell command like concatenating three strings that were never checked once.