Outlook 2000 Rich Text information disclosure
From: Dmitriy Kropivnitskiy (dkropivnitskiy@tigertesting.com)Date: 08/02/01
- Previous message: hypoclear: "Advisory Update: Design Flaw in Linksys EtherFast 4-Port Cable/DSL Router"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 2 Aug 2001 13:22:16 -0400 From: Dmitriy Kropivnitskiy <dkropivnitskiy@tigertesting.com> To: BugTraq List <bugtraq@securityfocus.com> Subject: Outlook 2000 Rich Text information disclosure Message-ID: <20010802132216.A20170@zaphod>
I am not sure if this was posted earlier, but Outlook 2000
Rich Text messages seem to contain full path to user's
mail box. Admittedly this is not much, but since by default
Outlook creates it's mailbox in the profile directory, I might get
the username and possibly OS version
(C:\WINNT\Profiles\johns\<blahblah>\mailbox.pst for example )
- Previous message: hypoclear: "Advisory Update: Design Flaw in Linksys EtherFast 4-Port Cable/DSL Router"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
