I am using Debian 8 but it was probably included in many distros.
An autorun-like “feature” can be found under certain circumstances using usb-devices command.
Those “cat” commands should be “cat -v”. I was specially worried with:
if [ -f $file ]; then
echo "S: $name=`cat $file`"
An example case would be a manufacturer filename with scape secuences on a dodgy USB device. I used the excellent Ubertooth One to test it but a 1.5 USD cp21x serial converter could be used inside a recycled usb flash case.
Most terminals have those problems fixed so this is not a big deal but better safe than sorry.
open a terminal window
echo -e "\e]2;a new terminal window title\a" > manufacturer
How to fix it fast:
cat usb-devices | sed s/cat/"cat -v"/ >usb-devices-fixed
Terminal Emulator Security Issues by HD Moore
CP21x AN721, how to change manufacturer name: