bugtraq - Brightmail leaks other user's spam

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <40E40F7C.8060207@gmx.net>
Date: Thu, 01 Jul 2004 15:19:56 +0200
From: Thomas Springer <tuevsec@....net>
To: BUGTRAQ@...urityfocus.com
Subject: Brightmail leaks other user's spam

Brightmail Spamfilter 6.0 offer a possibility to manage mails 
identified as spam in a http-driven "control-center" on the 
Brightmail-Server via links like
http://SERVER:41080/brightmail/quarantine/viewMsgDetails.do?id=QMsgView-3;3-0

Simply altering the last numbers in the URL (3;3 to 4;4, eg.) shows 
other domain-users Spam-Mail without any authentication.

Confirmed with Version 6.0.0.100 and previous beta-versions.

Brightmails support is aware of the problem, but didn't bother to 
confirm the problem in the 6.0 final.

Thomas Springer
--
Nach mir der Synflood.