address.com: email vulnerability

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



www.address.com has a vulnerability that allows
reading the email of other users. address.com offers,
among other things, free email (similar to
hotmail.com). 

However, the registration allows you to overwrite
existing accounts. If it does, the password is
overwritten, and the new user takes
control of the account (the former user will no longer
know the password).

However, the emails of the former user remain. In
attempting to ask address.com to look into this issue,
I was told they couldn't help because I wasn't a
premium member.



__________________________________________________
Do You Yahoo!?
Send FREE video emails in Yahoo! Mail!
http://promo.yahoo.com/videomail/

[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux