Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Focus on Microsoft
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: New Microsoft Exchange Server Vulnerability Nov 15 2003 06:15PM
Thor (thor hammerofgod com)
Some gems to point out in this "vulnerability."

It requires the guest account be turned on, and that the smtp virtual server
is directly accessible for auth. I love this quote from the guy who
"discovered" this:

"If the guest account is enabled (on Exchange 5.5 and 2000), even if your
login fails...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus