From: Mike '/m' 

On Sun, 16 Oct 2005 11:37:06 -0400, "Geo"  wrote:

>"Mike '/m'"  wrote in message
>news:hl32l1t0s3p2uvvn88cc6rmi5ahmc23chg{at}4ax.com...
>
>
>> If I have interpreted the symptoms I see correctly, this is also a
>> security problem.  So long as the stub continues to run, a
>> password-protected .pst file is not.
>
>Yes, I suppose it could be considered a minor security issue. But if you log
>off or lock your machine it's really not much of a threat so it would get a
>very low rating.
>
>It may however point to a more serious issue, in that somehow that stub is
>allowing access from other processes without requiring a proper security
>check. That might be worth mentioning on some of the security lists. You
>want me to mention it to a few folks I know?

My password-protected screen saver kicks in after 15 minutes, and I reboot
each evening when I leave work.  For me it's only a minor security issue;
but it's a crack in a wall, and as you note, that crack may be exploitable
for other purposes (I wonder what privilege level the stub runs at?).


 /m

--- BBBS/NT v4.01 Flag-5