Full Disclosure mailing list archives
confixx e-mail bug
From: Igor Buchmueller <bugtraq () int80h de>
Date: Sun, 24 Oct 2004 17:28:12 +0200
Hello, I noticed a bug in confixx. Confixx is a software to administrate websites. nice feautures are to create costumers or reseller costumers and gain them tools to administrate theirself websites. It is possible to catch all e-mails as a normal user which are going from the server to domain foo.bar 1. Create a costumer in your confixx. This can be done without root permissions on the server, you will just need a reseller account. In the process of creating a normal costumer, you will need to assign him/her a domain. 2. Assign, yahoo.com, hotmail.com or gmx.de to your costumer. 3. Login into your costumers account in confixx and create a wildcard e-mail adress for your domain. Now, all e-mails will be deliverd to your costumers account, from this confixx server. This worked for me, any comments? with best regards, Igor -- mfG, Igor B. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- confixx e-mail bug Igor Buchmueller (Oct 24)