Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Recall: Oracle read-only user can insert/update/delete data
From: "Brian Eaton" <eaton.lists () gmail com>
Date: Thu, 13 Apr 2006 22:34:19 -0400

On 4/13/06, Michael Holstein <michael.holstein () csuohio edu> wrote:
In my experience, it doesn't even work in an Exchange environment. The
user gets a message that the message should be recalled, but the
original is still there, even if it hasn't been read yet. I've heard
people say that at one time it would auto-delete the message if it
hadn't been read, but I've never seen that.

It does, provided you read the "recall" message first -- but since
Outlook (by default) displays in reverse chronological order, and most
people read email in the order received, it does little good.

Anybody understand how MS Exchange implements the "recall"
functionality?  I could see nothing in the e-mail headers that
appeared to prove the sender of the original message was the sender of
the recall request.

- Brian

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]