full-disclosure - Recall: Oracle read-only user can insert/update/delete data

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <acdc033d0604132004s68c2dc5dje2954467ec65b426@mail.gmail.com>
Date: Fri Apr 14 04:04:48 2006
From: michealespinola at gmail.com (Micheal Espinola Jr)
Subject: Recall: Oracle read-only user can
	insert/update/delete data

On 4/12/06, Mike Owen <kyphros@...il.com> wrote:
>
>
> In my experience, it doesn't even work in an Exchange environment. The
> user gets a message that the message should be recalled, but the
> original is still there, even if it hasn't been read yet. I've heard
> people say that at one time it would auto-delete the message if it
> hadn't been read, but I've never seen that.
> Secunia - http://secunia.com/
>

For the most part:

It only works within an Exchange environment.
It only works with unread messages.
It only works if the unread message is located in the Inbox.

More info:

<http://office.microsoft.com/en-us/assistance/HA010917601033.aspx>

--
ME2
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060413/d03fdda8/attachment.html