RE: Buffer overflow and code execution on iSeries (Off Topic)
Njal Fisketjon <njal.fisketjon-gyXR7Lt7FVk/[email protected]>
| Newsgroups | gmane.comp.lang.as400.mi |
|---|---|
| Message-ID | <[email protected]> |
> >What I have done is to run a simple MI program that sets > >a workstation message queue in break mode with a break > >handling program 'on-the-fly': > > Just wondering, what security would I need to run that? > > I'm thinking that as Joe-Programmer I could create the program object (I > don't think I need any special security to create an MI program). > > Now, you're modifying the workstation message queue, which is probably > *Public *change, so I could change any queue, right? > > So, if I ran that against a Queue that was in use by QSECOFR, and my > break handling program ran the "message" as a command I could run any > command in the context of QSECOFR, correct? > The message queue *is* public change, but it is system domain, so the MI program needs to be system state. _______________________________________________ This is the MI Programming on the AS400 / iSeries (MI400) mailing list To post a message email: MI400-Zwy7GipZuJhWk0Htik3J/[email protected] To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/mi400 or email: MI400-request-Zwy7GipZuJhWk0Htik3J/[email protected] Before posting, please take a moment to review the archives at http://archive.midrange.com/mi400.