Full Disclosure: fun of openoffice

["alert7 () xfocus org" <alert7 () xfocus org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

find a fun of openoffice 1.9.104

[alert7 () FC4 ~]$ touch ..\\..\\..\\etc\\passwd
[alert7 () FC4 ~]$ cat ..\\..\\..\\etc\\passwd
[alert7 () FC4 ~]$ ooffice ..\\..\\..\\etc\\passwd
/etc/passwd will be open.

fun bug :)

- --

Kind Regards,

- ---
alert7 () xfocus org

XFOCUS Security Team
http://www.xfocus.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFEAHfYsIGFlQFVy00RAqjZAJ9UdMKUkJ8YsTTe9S91DqIsqOux8wCgg1o1
3pngDZPupsSwAFVWgRBFdIo=
=+vlE
-----END PGP SIGNATURE-----
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/