<HEAD><TITLE>discuss@charon: [339] in "Coldmud discussion meeting"</TITLE>
<H1>[339] in Coldmud discussion meeting</H1></HEAD>
<A HREF="/"><IMG SRC="/i-d.gif" ALT="root"></A>
<A HREF="?339"><IMG SRC="/i-back.gif" ALT="meeting"></A>
<A HREF="/help.html"><IMG SRC="/i-help.gif" ALT="help"></A>
<A HREF="1"><IMG SRC="/i-first.gif" ALT="first"></A>
<IMG SRC="/n-fref.gif" ALT="">
<IMG SRC="/n-pref.gif" ALT="">
<A HREF="338"><IMG SRC="/i-prev.gif" ALT="previous"></A>
<A HREF="340"><IMG SRC="/i-next.gif" ALT="next"></A>
<IMG SRC="/n-nref.gif" ALT="">
<IMG SRC="/n-lref.gif" ALT="">
<A HREF="1641"><IMG SRC="/i-last.gif" ALT="last"></A>
<HR><H2>extremely large security hole in world 6</H2>
<H3>daemon@ATHENA.MIT.EDU (Tue May 31 01:10:58 1994
)</H3>
<PRE>
From: deforest@netcom.com (Robert de Forest)
To: coldstuff@MIT.EDU
Date: Mon, 30 May 1994 22:02:25 -0700 (PDT)

Don't panic, but $connection.parse in world 6 should check to make sure
 sender() == 0. Otherwise I can do $admin_1.connections()[1].parse(buffer_
 from_strings([";" + this.name_str() + ".chparents([$admin])"])).

Those having modified world 6 extensively probably have nothign to worry
 about. :)

-- 
"Mr. Tater, I think I have a punishment for you that is fair, just, and
 clever. Or maybe just fairly clever."

    -- King Yakko of Anvilania.
</PRE>
