Vulnerability Development mailing list archives

Netaddress and amexmail


From: buanzox () USA NET (Arturo Busleiman)
Date: Tue, 25 Apr 2000 14:49:29 -0300


Hi people.

I've been using NetAdress and AmexMail (actually, the same company) for a
couple of years now. I have one account in each one.

Well, the point is that today I decided to play a little:

I logged into my AmexMail account. After a successfull login you are
redirected to http://www.amexmail.com/tpl/Door/SomeUniqueID/Welcome

Ok, I opened a second browser and cut&pasted that into this new browser
window, BUT changing amexmail by netaddress. Results?
I had my account opened in two different browser windows, with the small
difference that the sessions were different. In one I had the amexmail
user interface, and in the other I had the netaddress user interface.
I had no friends online at that moment to send'em the URL to see if they
could login without supplying the password.

Ok, I now this is kind of stupid, but who knows?

Bye

*> Get PGP KEY: use pgpk -a hkp://horowitz.surfnet.nl/buanzox () usa net
*> Lista social de mail. Envia e-mail en blanco a lsb-subscribe () egroups com
*> Panic? My kernel doesn't panic! We are doomed! DustDustDust!!!!


Current thread: