Re: Mission Critical Application & Fault Tolerance

Article View: comp.databases.ms-access

Article #91

Back to comp.databases.ms-access Previous Next

#91

From: Eric Rossing
Date: Fri, 02 Feb 1996 00:00

20 lines
1691 bytes

On 31 Jan 1996 21:40:10 GMT, David Witteried
<Witterie%do@mhs.elan.af.mil> wrote:

>WRONG! If you use the built in security features of Access correctly you 
>can protect everything from unauthorized meddling/snooping. To do this 
>you need to create a new System.MDA file create an empty database, then 
>import your existing database, set up your own admin account and set the 
>security features you want on each object (the books give more detail). 
>If done right its pretty good.

Not exactly...

The CopyObject security hole allows any user(no matter how
underpriveledged) that can access the database to get to your code.
The code is NOT protected against a determined attack(which would
probably take all of 10-15 minutes by a knowledgable Access hacker).

Eric Rossing
Intec Company, Inc.
erossing@sirus.com

Technical Details

Message-ID: <3110d763.126694259@vixa.voyager.net>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References:

<talrozen.5.31097BDA@math.tau.ac.il> <4ekkn7$g67@Jupiter.mcs.net> <4eo2tl$7ta@rcp6.elan.af.mil> <4eonjq$r08@rcp6.elan.af.mil>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f7e47,8878b03495d72a51
X-Google-Attributes: gidf7e47,public
X-Google-Thread: ff0ac,8878b03495d72a51
X-Google-Attributes: gidff0ac,public
X-Google-Thread: 10f035,8878b03495d72a51
X-Google-Attributes: gid10f035,public
X-Google-Thread: fe659,8878b03495d72a51
X-Google-Attributes: gidfe659,public
From: erossing@sirus.com (Eric Rossing)
Subject: Re: Mission Critical Application & Fault Tolerance
Date: 1996/02/02
Message-ID: <3110d763.126694259@vixa.voyager.net>
X-Deja-AN: 137696810
references: <talrozen.5.31097BDA@math.tau.ac.il> <4ekkn7$g67@Jupiter.mcs.net> <4eo2tl$7ta@rcp6.elan.af.mil> <4eonjq$r08@rcp6.elan.af.mil>
organization: Intec Company, Inc.
reply-to: erossing@sirus.com
newsgroups: comp.databases.ms-access,comp.dcom.lans.novell,comp.sys.novell,bit.listserv.novell

Reply to Parent Message