Exchange 2K, and the M: drive.

From: Tom Sutherland (tsuther@silver-lake.com)
Date: 04/01/02 

From: Tom Sutherland <tsuther@silver-lake.com>
To: "'focus-ms@securityfocus.com'" <focus-ms@securityfocus.com>
Date: Mon, 1 Apr 2002 10:34:11 -0500

If I send a email to a recipient on an Exchange2K server, let's say
tom@tom.com, it should appear on the server itself as
M:\TOM.COM\MBX\TOM\Inbox\<subject>.eml by default, right?

So, I can pretty much put this file in a predictable and potentially
accessible place on an vanilla Exchange 2000 server by simply knowing an
email address. Better than FTP. Once this file exists, it seems to me that
it could be used to wreak havoc on a system.

Does anyone see any security problems with this feature? Should an Exchange
2K administrator be worried about the "M:" drive?

Relevant Pages

  • Re: Problem Sending forms to other Exchange Organization
    ... Both sender and recipient need access to the published form definition, ... You might also ask your administrator if they're blocking outgoing RTF on the server. ... Author of Configuring Microsoft Outlook 2003 ... We're having problems sending Custom Exchange forms to other Exchange ...
    (microsoft.public.outlook.program_forms)
  • NDR: dont have permission to send
    ... everyone's OL2003 onto the Exchange server. ... recipient. ... For assistance, contact your system ... administrator. ...
    (microsoft.public.exchange2000.transport)
  • Re: Exchange 2k question
    ... >> a main location that houses our Exchange2k server, ... I would like to add an Exchange 2k server to ... >Routing Group and house their mailboxes locally. ... >Microsoft Windows MVP - Active Directory ...
    (microsoft.public.exchange2000.admin)
  • Re: Exchange 2k question
    ... Lazz posted their thoughts, ... > a main location that houses our Exchange2k server, ... I would like to add an Exchange 2k server to ... Routing Group and house their mailboxes locally. ...
    (microsoft.public.exchange2000.admin)
  • Re: Need to load TS on an existing Exchange Server
    ... Windows Technologies - Terminal Services ... > controller and the Exchange2K server. ... > The TS installation gives a message regarding having to possibly reload ... Will I have to reload Exchange? ...
    (microsoft.public.windows.terminal_services)
Loading