X-Junk-Score: 0 [] X-Cloudmark-Score: 0 [] Return-Path: Received: from dpp-exch01-a.griffin.com ([83.148.189.141] verified) by mail.stalker.com (CommuniGate Pro SMTP 5.3.9f) with ESMTP id 61481839 for cgatepro@mail.stalker.com; Fri, 27 Aug 2010 01:01:09 -0700 Received-SPF: none receiver=mail.stalker.com; client-ip=83.148.189.141; envelope-from=ian.mordey@griffin.com X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CB45BE.062EAA7B" Subject: Determining valid email addresses via password recovery Date: Fri, 27 Aug 2010 09:01:15 +0100 Message-ID: <39C2B4777DC0364FBBF4D8233402E6C705CA87EA@dpp-exch01-a.network.griffin.net.uk> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Determining valid email addresses via password recovery Thread-Index: ActFvasSIBvKz6pVTXa7xTmnMO/E8w== From: "Ian Mordey" To: This is a multi-part message in MIME format. ------_=_NextPart_001_01CB45BE.062EAA7B Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi there It seems it is possible to determine valid email addresses using the password recovery of CGP webmail. If you key in an account name that doesn't exist you get an error "unknown user account" if you key in a valid account you get a different message "no password recovery email address has been specified". Are these messages customisable? =20 Thanks Ian ------_=_NextPart_001_01CB45BE.062EAA7B Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi there

It seems it is possible to = determine valid email addresses using the password recovery of CGP = webmail. If you key in an account name that doesn’t exist you get = an error “unknown user account” if you key in a valid = account you get a different message “no password recovery email = address has been specified”. Are these messages = customisable?

 

Thanks

Ian

------_=_NextPart_001_01CB45BE.062EAA7B--