[Full-Disclosure] confixx e-mail bug
bugtraq at int80h.de
Sun Oct 24 16:28:12 BST 2004
I noticed a bug in confixx. Confixx is a software to administrate websites.
nice feautures are to create costumers or reseller costumers and gain them
tools to administrate theirself websites.
It is possible to catch all e-mails as a normal user which are going from the
server to domain foo.bar
1. Create a costumer in your confixx. This can be done without root
permissions on the server, you will just need a reseller account. In the
process of creating a normal costumer, you will need to assign him/her a
2. Assign, yahoo.com, hotmail.com or gmx.de to your costumer.
3. Login into your costumers account in confixx and create a wildcard e-mail
adress for your domain.
Now, all e-mails will be deliverd to your costumers account, from this confixx
This worked for me, any comments?
with best regards, Igor
mfG, Igor B.
Full-Disclosure is hosted and sponsored by Secunia.