Full Disclosure mailing list archives

fun of openoffice

From: "alert7 () xfocus org" <alert7 () xfocus org>
Date: Sat, 25 Feb 2006 23:29:28 +0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

find a fun of openoffice 1.9.104

[alert7@FC4 ~]$ touch ..\\..\\..\\etc\\passwd
[alert7@FC4 ~]$ cat ..\\..\\..\\etc\\passwd
[alert7@FC4 ~]$ ooffice ..\\..\\..\\etc\\passwd
/etc/passwd will be open.

fun bug :)

- --

Kind Regards,

- ---
alert7 () xfocus org

XFOCUS Security Team
http://www.xfocus.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFEAHfYsIGFlQFVy00RAqjZAJ9UdMKUkJ8YsTTe9S91DqIsqOux8wCgg1o1
3pngDZPupsSwAFVWgRBFdIo=
=+vlE
-----END PGP SIGNATURE-----
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

fun of openoffice alert7 () xfocus org (Feb 25)
- Re: fun of openoffice Joachim Schipper (Feb 25)
  - Re: fun of openoffice john kalergis (Feb 25)
- <Possible follow-ups>
- Re: fun of openoffice bart2k (Feb 25)