[gull] Re: [gull-annonces] Résumé SecurityFocus Newsletter #266

[Jean-Bruno Luginbühl]

Le jeu 16/09/2004 à 09:44, Marc SCHAEFER a écrit :

> OpenOffice/StarOffice Local File Disclosure Vulnerability
> BugTraq ID: 11151
> Remote: No
> Date Published: Sep 10 2004
> Relevant URL: http://www.securityfocus.com/bid/11151
> Summary:
> StarOffice and OpenOffice are reported prone to a local file
> disclosure vulnerability.  This issue presents itself because the
> application creates insecure temporary files.  Each time a user saves
> a file, a compressed copy of the file is saved in a temporary
> direcotry.  This can allow a local attacker to disclose files of other
> users.
> 
> OpenOffice 1.1.2 and StarOffice 7.0 are reported prone to this
> vulnerability.
> 
> [ StarOffice est proprietaire ]
> 

C'est apparemment corrigé avec la version 1.1.3

Jean-Bruno


> _______________________________________________
> gull-annonces mailing list
> gull-annonces at lists.alphanet.ch
> http://lists.alphanet.ch/mailman/listinfo/gull-annonces
>