Vodamail has a bug...

internaut

Senior Member
Joined
Oct 3, 2005
Messages
701
...that could allow miscreants access to your personal, private and confidential material. I've realised this vulnerability a while back already but it just didn't click as to how critical it could be or I probably thought that the hole would be fixed before I could say, "been hacked".
The flaw in the shoddy programming revolves around the 'alias" option. The system doesn't have the ability to deny an alias that you choose if it already exists which ultimately means that if five guys choose "John" as an alias, the received mail from all the Johns will eventually end up only at the first John who registered his alias. Catastrophic, isn't it. Anyone else come across this flaw or is it just me?
 

Zax

Active Member
Joined
Jul 28, 2006
Messages
92
Just tried creating john@vodamail.co.za - it says found match so won't create alias. Also tried using one of my own aliases - same result. Problem doesn't seem to exist any more!:)
 

3g_rox

Well-Known Member
Joined
Aug 18, 2005
Messages
206
Just tried creating john@vodamail.co.za - it says found match so won't create alias. Also tried using one of my own aliases - same result. Problem doesn't seem to exist any more!:)

Also found same thing previously when creating aliases off my account - it gave me the "Found match for alias [*****] - cannot create alias" story. This was about 2 months back already.
 
Last edited:
Top