CVE-2023-1183: Apache OpenOffice: Arbitrary file write in Apache OpenOffice Base

[Arrigo Marchiori]

Severity: Moderate

Affected versions:

- Apache OpenOffice through 4.1.15

Description:

An attacker can craft an OBD containing a "database/script" file with
a SCRIPT command where the contents of the file could be written to a
new file whose location was determined by the attacker.

There are no known exploits of this vulnerability.
A proof-of-concept demonstration exists.

Thanks to the reporter for discovering this issue.

Credit:

The Apache OpenOffice Security Team would like to thank Gregor Kopf of Secfault 
Security GmbH (Germany) for discovering and reporting this attack vector and 
Fred Toussi for kindly providing a solution to this issue within HSQLDB.

References:
https://openoffice.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-1183
-- 
Arrigo

-
To unsubscribe, e-mail: users-unsubscr...@openoffice.apache.org
For additional commands, e-mail: users-h...@openoffice.apache.org

Defect openoffice base

[goranb.andersson]

Hi
I’m using windows 10
My openoffice base dont work anymore and I cant fix it. Tried to uninstall and 
reinstall and cleaned register with cc cleaner.

Error messages: Cant connect to datasorce. Can’t find SDBC drive routine. 
Before this reinstall and register cleaning it said it was defect Java.

Verktyg/Alternativ/Java: messiges box says ”JRE already installed” after 
uninstall/reinstall and register cleaning with cc cleaner. And no java to chose 
in the box.
Unable to add Another JRE: Box says: Your mapp chosen have no JRE whatever java 
I try.

Do you have any program with Clean away any remains left after uninstall? Or 
any other sulotions

Regards
Goran Andersson (have the Swedish open office v. 4.1.3)  
goranb.anders...@telia.com 


Skickades från E-post för Windows 10

Re: OpenOffice Base

[Andrea Pescetti]

On 19/08/2016 Richard Green wrote:

Hi. I am interested in using OpenOffice’s Base product for database
management. Will it work on a Mac with El Capitan (version 10.11.6)?


It will, but OpenOffice 4.1.2 has a known bug affecting Java-based 
operations: https://bz.apache.org/ooo/show_bug.cgi?id=126622


So if you plan to use OpenOffice Base extensively you might want to use 
version 4.1.1, and then upgrade it when a new version (after the current 
4.1.2) is released.


Regards,
  Andrea.

-
To unsubscribe, e-mail: users-unsubscr...@openoffice.apache.org
For additional commands, e-mail: users-h...@openoffice.apache.org

OpenOffice Base

[Richard Green]

Hi. I am interested in using OpenOffice’s Base product for database management. 
Will it work on a Mac with El Capitan (version 10.11.6)?

Thanks!

Richard Green
Expat Concierge U.S.
Owner/Founder
1-954-654-1651
rich...@expatconciergeus.com
www.ExpatConciergeUS.com 


Managing your affairs in the U.S. while you enjoy your life abroad.

Re: OpenOffice Base - running time of a query

[Rory O'Farrell]

On Mon, 9 May 2016 16:37:28 +0200
Gábor Szepes  wrote:

> Dear Support,
> 
> I would like to know how to set visible the running time of a query.
> If I execute or perform a query I would like to see the amount of time that
> needed for this (preferably in milliseconds).
> Thank You for Your help in advance.
> Best regards,
> 
> Gábor Szepes

Elapsed time macro in Andrew Pitonyak's OpenOffice.org Macros Explained section 
6.10, listing 117. Call this before and after function to be timed and show the 
difference.
-- 
Rory O'Farrell 

-
To unsubscribe, e-mail: users-unsubscr...@openoffice.apache.org
For additional commands, e-mail: users-h...@openoffice.apache.org

OpenOffice Base - running time of a query

[Gábor Szepes]

Dear Support,

I would like to know how to set visible the running time of a query.
If I execute or perform a query I would like to see the amount of time that
needed for this (preferably in milliseconds).
Thank You for Your help in advance.
Best regards,

Gábor Szepes

Re: OpenOffice Base Problems

[Martin Groenescheij]

On 25-Oct-15 03:27, Ian Gow wrote:

Hi

I’ve just spent the last 5 days putting constructing a database for my business 
accounts and persevered despite the many problems I’ve had with V4 on my iMac. 
The most common is the crashing without reason in various areas. I put up with 
this as I could easily get back in and avoid those areas. However, after the 
last crash when trying to write a SQL statement the ODB file will no longer 
load and get an graphics-related error message. I’ve checked your forums and 
can find no resolution.

Is there a general problem with the SQL area? Is there any way I can get my 
data back or is the ODB file corrupt?


If you can get back your data depends on your settings for back up and 
auto recovery these settings can be found under Tools --> Preference 
--|> Load/Save
I hope that you don't use the build in database as this is stored inside 
the odb file. If the odb file gets corrupt you
lose all data. Best way is to install a separate database and connect 
the odb file to the database.




I need this data to start out Winter Ad Campaign and need to know if I have to 
drop OpenOffice for another Suite or, as I would much prefer, get the file back 
and sort out what’s going on with this version.

Thanks
Ian
-
To unsubscribe, e-mail: users-unsubscr...@openoffice.apache.org
For additional commands, e-mail: users-h...@openoffice.apache.org





-
To unsubscribe, e-mail: users-unsubscr...@openoffice.apache.org
For additional commands, e-mail: users-h...@openoffice.apache.org

OpenOffice Base Problems

[Ian Gow]

Hi

I’ve just spent the last 5 days putting constructing a database for my business 
accounts and persevered despite the many problems I’ve had with V4 on my iMac. 
The most common is the crashing without reason in various areas. I put up with 
this as I could easily get back in and avoid those areas. However, after the 
last crash when trying to write a SQL statement the ODB file will no longer 
load and get an graphics-related error message. I’ve checked your forums and 
can find no resolution.

Is there a general problem with the SQL area? Is there any way I can get my 
data back or is the ODB file corrupt?

I need this data to start out Winter Ad Campaign and need to know if I have to 
drop OpenOffice for another Suite or, as I would much prefer, get the file back 
and sort out what’s going on with this version.

Thanks
Ian
-
To unsubscribe, e-mail: users-unsubscr...@openoffice.apache.org
For additional commands, e-mail: users-h...@openoffice.apache.org

Re: OpenOffice Base

[Alexandro Colorado]

I would recomend to use links so that the link field will go into the
picture object.
I will recomend to read the thread about it from our forums:
https://forum.openoffice.org/en/forum/viewtopic.php?f=83&t=44124

There are many good base builders and also some free to use models for
verticals.

On 9/3/14, aenn pelz  wrote:
> Dear Sirs,
>
> we are an animal welfare organization and we want to set up a database
> for dogs for adoption. Therefore we need to implement pictures into the
> fields.
>
> How is it possible to integrate pictures into a database.
>
>
> Thanks for your soon reply.
>
> Sincerely yours,
>
> Aenn Pelz
>


-- 
Alexandro Colorado
Apache OpenOffice Contributor
882C 4389 3C27 E8DF 41B9  5C4C 1DB7 9D1C 7F4C 2614

-
To unsubscribe, e-mail: users-unsubscr...@openoffice.apache.org
For additional commands, e-mail: users-h...@openoffice.apache.org

OpenOffice Base

[aenn pelz]

Dear Sirs,

we are an animal welfare organization and we want to set up a database
for dogs for adoption. Therefore we need to implement pictures into the
fields.

How is it possible to integrate pictures into a database.


Thanks for your soon reply.

Sincerely yours,

Aenn Pelz

Re: Openoffice-Base

[NoOp]

On 08/13/2014 07:44 AM, Dewald Barnard wrote:
> Good afternoon
> 
> I need assistance in templates that will work for a small business. All I
> need is something to issue (make out delivery notes with automated delivery
> note numbers), receive stock, stock availability and automated stock
> reorders. I'm in charge of the parts store and sales and the system that we
> are using is outdated (written book records). So I need something to help
> me keep record of all the parts and their bin locations. When I make out a
> delivery note the part issue must automatically be deducted from the
> availability and if it comes to minimum required quantity it must
> automatically reorder the stock to maximum level.
> 
> Do you perhaps have something similar to this or is this to complex to
> make? Any suggestions is appreciated.
> 
> Kindest Regards
> Dewald Barnard
> RSA
> 

AOO have a series of example database tables that you can experiment with:
File|New|Database|Create new database|Finish|allow to save|Tables|Use
Wizard to Create Table| then you will find sample Business and Personal
tables you can experiment with - Business|Property might be a good place
to start. Also see:
https://wiki.openoffice.org/wiki/Documentation




However, as others have pointed out, you might look to a pre-built
application better suited to your requirements.











-
To unsubscribe, e-mail: users-unsubscr...@openoffice.apache.org
For additional commands, e-mail: users-h...@openoffice.apache.org

Re: Openoffice-Base

[Martin Groenescheij]

Base is nothing more than a front-end to a database, what you ask is an 
warehouse / inventory application.
If you understand SQL and Base you can write your own application, but 
it can take much of your time.



On 14-8-2014 0:44, Dewald Barnard wrote:

Good afternoon

I need assistance in templates that will work for a small business. All I
need is something to issue (make out delivery notes with automated delivery
note numbers), receive stock, stock availability and automated stock
reorders. I'm in charge of the parts store and sales and the system that we
are using is outdated (written book records). So I need something to help
me keep record of all the parts and their bin locations. When I make out a
delivery note the part issue must automatically be deducted from the
availability and if it comes to minimum required quantity it must
automatically reorder the stock to maximum level.

Do you perhaps have something similar to this or is this to complex to
make? Any suggestions is appreciated.

Kindest Regards
Dewald Barnard
RSA

RE: Openoffice-Base

[elderdanlewis]

     Simply put,  you must first  create the database including its tables and 
fields. What you want in your template has to be created in a query.  Then use 
the query as the basis for a report. 

Dan

 Original message 
From: Dewald Barnard  
Date:08/13/2014  10:44 AM  (GMT-05:00) 
To: users@openoffice.apache.org 
Subject: Openoffice-Base 

Good afternoon

I need assistance in templates that will work for a small business. All I
need is something to issue (make out delivery notes with automated delivery
note numbers), receive stock, stock availability and automated stock
reorders. I'm in charge of the parts store and sales and the system that we
are using is outdated (written book records). So I need something to help
me keep record of all the parts and their bin locations. When I make out a
delivery note the part issue must automatically be deducted from the
availability and if it comes to minimum required quantity it must
automatically reorder the stock to maximum level.

Do you perhaps have something similar to this or is this to complex to
make? Any suggestions is appreciated.

Kindest Regards
Dewald Barnard
RSA

Openoffice-Base

[Dewald Barnard]

Good afternoon

I need assistance in templates that will work for a small business. All I
need is something to issue (make out delivery notes with automated delivery
note numbers), receive stock, stock availability and automated stock
reorders. I'm in charge of the parts store and sales and the system that we
are using is outdated (written book records). So I need something to help
me keep record of all the parts and their bin locations. When I make out a
delivery note the part issue must automatically be deducted from the
availability and if it comes to minimum required quantity it must
automatically reorder the stock to maximum level.

Do you perhaps have something similar to this or is this to complex to
make? Any suggestions is appreciated.

Kindest Regards
Dewald Barnard
RSA

Re: OpenOffice Base

[Martin Groenescheij]

This is an OpenOffice Forum.
Such strong personal opinions of a database should be discussed in other forums.

Sent from my mobile device.

On 16 Mar 2014, at 5:53 am, Wolfgang Keller  wrote:

>> ONLY ONE answer. Start again but this time DO NOT use the embedded 
>> Database engine - use MySQL or equivalent!! It's the only thing to do 
>> and I can tell you the difference is amazing!!
> 
> Abslutely NEVER, I repeat N-E-V-E-R use MySQL if you want your data to
> be safe. MySQL was made by people who are "competent" enough to e.g. not
> even consider it necessary to enforce foreign key constraints by
> default.
> 
> Use PostgreSQL.
> 
> Sincerely,
> 
> Wolfgang
> 
> ---
> List Conduct Guidelines: http://openoffice.apache.org/list-conduct.html
> To unsubscribe, e-mail: users-unsubscr...@openoffice.apache.org
> For additional commands, e-mail: users-h...@openoffice.apache.org
> 

---
List Conduct Guidelines: http://openoffice.apache.org/list-conduct.html
To unsubscribe, e-mail: users-unsubscr...@openoffice.apache.org
For additional commands, e-mail: users-h...@openoffice.apache.org

Re: OpenOffice Base

[Wolfgang Keller]

> ONLY ONE answer. Start again but this time DO NOT use the embedded 
> Database engine - use MySQL or equivalent!! It's the only thing to do 
> and I can tell you the difference is amazing!!

Abslutely NEVER, I repeat N-E-V-E-R use MySQL if you want your data to
be safe. MySQL was made by people who are "competent" enough to e.g. not
even consider it necessary to enforce foreign key constraints by
default.

Use PostgreSQL.

Sincerely,

Wolfgang

---
List Conduct Guidelines: http://openoffice.apache.org/list-conduct.html
To unsubscribe, e-mail: users-unsubscr...@openoffice.apache.org
For additional commands, e-mail: users-h...@openoffice.apache.org

Re: OpenOffice Base

[Ian Whitfield]

Been there and had ALL the same problems!!! For over two years.

ONLY ONE answer. Start again but this time DO NOT use the embedded 
Database engine - use MySQL or equivalent!! It's the only thing to do 
and I can tell you the difference is amazing!!


Salvage the data you have from your backup as a CSV file and import it 
into your new Database and go from there.


IanW
Pretoria

On 03/13/2014 05:00 PM, Miguel Tamayo wrote:

Dear Friends:
For the second time I have experienced the following problem with Apache 
OpenOffice Base: When using this program it freezes and all the data is lost. I 
am using Apache OpenOffice 4.1, in Windows 7 Ultimate, 64 bit.
There is any place where I can find the lost data: I have spent many hours  in 
this base And I don’t want to lose it.
Your help/ assistance will be highly appreciated.
Best Regards
Miguel Tamayo




---
List Conduct Guidelines: http://openoffice.apache.org/list-conduct.html
To unsubscribe, e-mail: users-unsubscr...@openoffice.apache.org
For additional commands, e-mail: users-h...@openoffice.apache.org

OpenOffice Base

[Miguel Tamayo]

Dear Friends:
For the second time I have experienced the following problem with Apache 
OpenOffice Base: When using this program it freezes and all the data is lost. I 
am using Apache OpenOffice 4.1, in Windows 7 Ultimate, 64 bit.
There is any place where I can find the lost data: I have spent many hours  in 
this base And I don’t want to lose it. 
Your help/ assistance will be highly appreciated.
Best Regards
Miguel Tamayo

Re: Openoffice Base Feature

[Andrea Pescetti]

On 05/06/2013 TCNS Customer Service - Gigi Baxter wrote:

This information may only relate to Open Office Base software. ...
Since version 2.4.0
when you click in the record search box, search for text box the contents of
the field are not selected. With version 2.4.0
when you open the dialog box, the contents of the field are selected. This
makes editing easy.
I tried the newer versions, and keep going back to version 2.4.0


Hello Gigi, it's not very clear to me where the problem is.

Could you open an issue on https://issues.apache.org/ooo (you will need 
to register there), set product to "Base" (then we will set other fields 
appropriately), provide a step-by-step description and, if at all 
possible, a screenshot of the "right" case (2.4.0) and one of the 
"wrong" (post-2.4.0) one? This will make it easier to investigate.


Regards,
  Andrea.

-
To unsubscribe, e-mail: users-unsubscr...@openoffice.apache.org
For additional commands, e-mail: users-h...@openoffice.apache.org

Openoffice Base Feature

[TCNS Customer Service]

Hi,

This information may only relate to Open Office Base software. I use it 
every day and it's the only open office application I use. It works 100% of 
the time and makes my life easier, thank you.

I didn't notice anyone mentioning it, so I wanted to write this email for 
some time. Since version 2.4.0

when you click in the record search box, search for text box the contents of 
the field are not selected. With version 2.4.0

when you open the dialog box, the contents of the field are selected. This 
makes editing easy.

I tried the newer versions, and keep going back to version 2.4.0

just because of the feature.

If you ever put back the functionality of the text box, I would like to 
support the project moving forward.

Thank you for considering it.

I also mention it in the hope you will continue to support 2.4.0.

In case you're just sitting around waiting for user feedback, one day it 
would be nice to be able to copy and paste append a record also, but I can 
imaging that's a tricky one.


Regards,
Gigi Baxter
 


-
To unsubscribe, e-mail: users-unsubscr...@openoffice.apache.org
For additional commands, e-mail: users-h...@openoffice.apache.org