RE: Buffer overflow and code execution on iSeries (Off Topic)
"Walden H. Leverich" <WaldenL-z/[email protected]>
| Newsgroups | gmane.comp.lang.as400.mi |
|---|---|
| Message-ID | <[email protected]> |
>What I have done is to run a simple MI program that sets >a workstation message queue in break mode with a break >handling program 'on-the-fly': Just wondering, what security would I need to run that? I'm thinking that as Joe-Programmer I could create the program object (I don't think I need any special security to create an MI program). Now, you're modifying the workstation message queue, which is probably *Public *change, so I could change any queue, right? So, if I ran that against a Queue that was in use by QSECOFR, and my break handling program ran the "message" as a command I could run any command in the context of QSECOFR, correct? Hmmmm..... -Walden ------------ Walden H Leverich III Tech Software (516) 627-3800 x11 [email protected] http://www.TechSoftInc.com Quiquid latine dictum sit altum viditur. (Whatever is said in Latin seems profound.) _______________________________________________ This is the MI Programming on the AS400 / iSeries (MI400) mailing list To post a message email: MI400-Zwy7GipZuJhWk0Htik3J/[email protected] To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/mi400 or email: MI400-request-Zwy7GipZuJhWk0Htik3J/[email protected] Before posting, please take a moment to review the archives at http://archive.midrange.com/mi400.