Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

confixx e-mail bug
From: Igor Buchmueller <bugtraq () int80h de>
Date: Sun, 24 Oct 2004 17:28:12 +0200


Hello,

I noticed a bug in confixx. Confixx is a software to administrate websites. 
nice feautures are to create costumers or reseller costumers and gain them 
tools to administrate theirself websites.


It is possible to catch all e-mails as a normal user which are going from the 
server to domain foo.bar

1. Create a costumer in your confixx. This can be done without root 
permissions on the server, you will just need a reseller account. In the 
process of creating a normal costumer, you will need to assign him/her a 
domain.

2. Assign, yahoo.com, hotmail.com or gmx.de to your costumer.

3. Login into your costumers account in confixx and create a wildcard e-mail 
adress for your domain.

Now, all e-mails will be deliverd to your costumers account, from this confixx 
server.

This worked for me, any comments?

with best regards, Igor


-- 
mfG, Igor B.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
  • confixx e-mail bug Igor Buchmueller (Oct 24)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]