From: Frederic M. <fre...@wo...> - 2006-06-23 16:41:21
|
Ian Murphy wrote: > Found a way of doing it. Both the pop3 and imap servers under MS > exchange support a format of > > User domain\privuser\mbx > Passowrd privuserpassword > > Which allows reading a users mailbox using the password of a privileged > account - assuming the appropriate security has been setup in exchange. > > Mbx in this case is simply the user account name. > I can't believe they did it ! It's silly to offer the opportunity to use a system user name and password to access a remote service... A dictionary attack on any pop3 or imap mailbox could yield a system password. Microsoft just never learn :-( Well, at least, it solves your problem :-) Frederic |