Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

fun of openoffice
From: "alert7 () xfocus org" <alert7 () xfocus org>
Date: Sat, 25 Feb 2006 23:29:28 +0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

find a fun of openoffice 1.9.104

[alert7 () FC4 ~]$ touch ..\\..\\..\\etc\\passwd
[alert7 () FC4 ~]$ cat ..\\..\\..\\etc\\passwd
[alert7 () FC4 ~]$ ooffice ..\\..\\..\\etc\\passwd
/etc/passwd will be open.

fun bug :)

- --

Kind Regards,

- ---
alert7 () xfocus org

XFOCUS Security Team
http://www.xfocus.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFEAHfYsIGFlQFVy00RAqjZAJ9UdMKUkJ8YsTTe9S91DqIsqOux8wCgg1o1
3pngDZPupsSwAFVWgRBFdIo=
=+vlE
-----END PGP SIGNATURE-----
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault