[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-disclosure] fun of openoffice
- To: full-disclosure@xxxxxxxxxxxxxxxxx
- Subject: [Full-disclosure] fun of openoffice
- From: "alert7@xxxxxxxxxx" <alert7@xxxxxxxxxx>
- Date: Sat, 25 Feb 2006 23:29:28 +0800
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
find a fun of openoffice 1.9.104
[alert7@FC4 ~]$ touch ..\\..\\..\\etc\\passwd
[alert7@FC4 ~]$ cat ..\\..\\..\\etc\\passwd
[alert7@FC4 ~]$ ooffice ..\\..\\..\\etc\\passwd
/etc/passwd will be open.
fun bug :)
- --
Kind Regards,
- ---
alert7@xxxxxxxxxx
XFOCUS Security Team
http://www.xfocus.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQFEAHfYsIGFlQFVy00RAqjZAJ9UdMKUkJ8YsTTe9S91DqIsqOux8wCgg1o1
3pngDZPupsSwAFVWgRBFdIo=
=+vlE
-----END PGP SIGNATURE-----
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/