Re: Security side-effects of Word fields

From: Kyle Duren (acidrain_askat_private)
Date: Tue Aug 27 2002 - 00:11:09 PDT

  • Next message: Rothe, Greg (G.A.): "RE: White paper: Exploiting the Win32 API."

    
     ('binary' encoding is not supported, stored as-is)
    In-Reply-To: <20020826212322.1137.qmailat_private>
    
    Could you use this in say a network environtment?
    
    change this around a bit to get files that someone else has access to, but 
    you dont?
    
    ie: { IF { INCLUDETEXT { IF { DATE } = { 
    DATE } "\\servername\usershare\a.txt" "c:\\a.txt" }  \* MERGEFORMAT  } 
    = "" "" \* MERGEFORMAT }
    
    
    Using the permissions of Bob to get a file that Alice doesn't and 
    shouldn't have access to.
    
    I do not have a file server to test that one, so its only an idea.
    
    
    "An eye for an eye only makes the whole world blind" - Ghandi
    
    Kyle Duren
    



    This archive was generated by hypermail 2b30 : Wed Aug 28 2002 - 08:24:26 PDT