[10353] in bugtraq
Re: Outlook 98 allows spoofing internal users
daemon@ATHENA.MIT.EDU (Peter van Dijk)
Sun Apr 25 14:18:02 1999
Mail-Followup-To: BUGTRAQ@NETSPACE.ORG
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Message-Id: <19990425183611.F676@attic.vuurwerk.nl>
Date: Sun, 25 Apr 1999 18:36:11 +0200
Reply-To: Peter van Dijk <peter@ATTIC.VUURWERK.NL>
From: Peter van Dijk <peter@ATTIC.VUURWERK.NL>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <Pine.BSF.3.96.990420145919.11372A-100000@root.org>; from Nate
Lawson on Tue, Apr 20, 1999 at 03:10:05PM -0700
On Tue, Apr 20, 1999 at 03:10:05PM -0700, Nate Lawson wrote:
>
> Suggested Fix: always show the full email address of any recipient that is
> not local (i.e. username@example.com would be hidden but any instance of
> user@hotmail.com would be shown)
Yeah, like: I am user@aol.com and I'd like outlook to hide evilhacker@aol.com.
Outlook should not be hiding anything..
Greetz, Peter
--
| 'He broke my heart, | Peter van Dijk |
I broke his neck' | peter@attic.vuurwerk.nl |
nognixz - As the sun | Hardbeat@ircnet - #cistron/#linux.nl |
| Hardbeat@undernet - #groningen/#kinkfm/#vdh |
