RE: Outlook On The Web Security Risk!!!
- From: "Bob Fronk" <bobfronk@xxxxxxxxx>
- To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
- Date: Thu, 9 Feb 2006 13:32:06 -0500
It shouldn't.... You have a permissions issue somewhere.
Bob Fronk
bobfronk@xxxxxxxxx
> -----Original Message-----
> From: Phil Marano [mailto:pmarano@xxxxxxxx]
> Sent: Thursday, February 09, 2006 12:53 PM
> To: [ExchangeList]
> Subject: [exchangelist] Outlook On The Web Security Risk!!!
>
> http://www.MSExchange.org/
>
> Does anyone know how to prevent users once they are logged into their mail
> account via the web client from adding another users email account name to
> the end of the current web address and viewing that persons mailbox?
>
> (ie:
> http://mail.yourdomain.com/exchange/jdoe
> <---- adding a users account name to then of the /exchange/ directory will
> allow that person to view anyone mailbox.)
>
> This is exchange 2003
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this MSExchange.org Discussion List as:
> bfronk@xxxxxxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Report abuse to info@xxxxxxxxxxxxxx
Other related posts:
