Vodamail has a bug...

internaut

Senior Member
Joined
Oct 3, 2005
Messages
702
Reaction score
71
Location
Cape Town, Southern, Surrey Estate
...that could allow miscreants access to your personal, private and confidential material. I've realised this vulnerability a while back already but it just didn't click as to how critical it could be or I probably thought that the hole would be fixed before I could say, "been hacked".
The flaw in the shoddy programming revolves around the 'alias" option. The system doesn't have the ability to deny an alias that you choose if it already exists which ultimately means that if five guys choose "John" as an alias, the received mail from all the Johns will eventually end up only at the first John who registered his alias. Catastrophic, isn't it. Anyone else come across this flaw or is it just me?
 
Just tried creating [email protected] - it says found match so won't create alias. Also tried using one of my own aliases - same result. Problem doesn't seem to exist any more!:)

Also found same thing previously when creating aliases off my account - it gave me the "Found match for alias [*****] - cannot create alias" story. This was about 2 months back already.
 
Last edited:
Top
Sign up to the MyBroadband newsletter
X