29/08/2002 10:29:54, "Davide Crudo" <[EMAIL PROTECTED]> wrote:

>Has Anyone notice the following?
>
>1) Log-in to openwebmail with www.site1.com/webmail/ 
>and authenticate with  a user belonging to the website 1. (i.e. USER1)
>
>2) Now Log-in again to openwebmail with www.site1.com/webmail/
>BUT this time with a user belonging to another website.(i.e. USER2)
>
>Suprise! User 2 sees the emails belonging to User 1! 
>
>
>Regards,
>
>Dave.
>

I tried it but it didnt do that for me. I just get an incorrect password message when 
I try step 2.

Regards,
Menno




________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs SkyScan
service. For more information on a proactive anti-virus service working
around the clock, around the globe, visit http://www.messagelabs.com
________________________________________________________________________
_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security

Reply via email to