ADMIN - Explore the new world of system administration! Special introductory offer! Order by September 30th to save 10% off the regular subscription price! Each issue delivers technical solutions to the real-world problems you face every day. Learn the latest techniques for better:
network security
system management
troubleshooting
performance tuning
virtualization
cloud computing
on Windows, Linux, Solaris, and popular varieties of Unix.
Security researchers Secunia have discovered a vulnerability in StarOffice that gives attackers the ability to execute arbitrary code. The developers of the free counterpart, OpenOffice, removed the problem last week.
The cause of the vulnerability with the CVE ID 2007-4575 is erroneous security restrictions in the integrated HSQLDB database which allows the execution of SQL queries with malevolent Java code with root privileges. An attacker needs to trick the user into opening a carefully crafted document for the exploit to work.
The vulnerability affects StarOffice 1.0.8.9 and older versions of the application. OpenOffice is also affected, but its developers published version 2.3.1 last week to fix the bug. A fix is not currently available for StarOffice. Uses should only open documents from trusted sources. Secunia says that the bug is critical.
Get 3 Issues + 3 DVDs for the price of a single issue!
Let Linux Magazine's hands-on, technical articles guide you in your daily Linux use. Check out bonus DVDs like Ubuntu, SUSE, or Fedora and save the download.
Only available for a limited time. Don't miss out!
Comments