Re: Cell phone access to email

["Fred Newtz" <fbnewtz () houston rr com>]

What are you asking here?  Are you asking how it is possible for them to
send email to and from the phone with no password?  That is simple.  I am
sure the password is based on their ESN or something of that sort.  Sounds
like there could be lots of room for some fun with that setup.  Of course,
if you know what you are doing.  Fortunately I do not. :)

Fred
----- Original Message -----
From: "David B. Harrison" <hdavid11580 () qwest net>
To: <vuln-dev () securityfocus com>
Sent: Tuesday, August 21, 2001 11:06 PM
Subject: Cell phone access to email


> I am hoping someone can answer a question for me.  A customer of mine is
> testing a new cell phone from Qwest.  It gives them access to cheap cell
> phone connection and Internet mail.  The problem is it connects to
exchange
> without a password.  I can see if qwest was the server location and they
> were doing a copy of some sort, but the server is behind a firewall from
> Qwest yet they are getting email to the phone both external and local.
>
> Any Ideas?
> Dave H