home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!ukma!darwin.sura.net!zaphod.mps.ohio-state.edu!moe.ksu.ksu.edu!kitty.ksu.ksu.edu!news
- From: probreak@kitty.ksu.ksu.edu (James Michael Chacon)
- Newsgroups: comp.security.misc
- Subject: Re: BAFFELED ??#@# !! CONFUSED !!#@@!!!!!
- Date: 11 Nov 1992 11:03:02 -0600
- Organization: Kansas State University
- Lines: 17
- Message-ID: <1drec6INNmf3@kitty.ksu.ksu.edu>
- References: <1992Nov10.201503.6288@gw.wmich.edu>
- NNTP-Posting-Host: kitty.ksu.ksu.edu
-
- 873nikorawal@gw.wmich.edu writes:
-
- > What I do not understand is that how a user can send mail to a different user
- >on the same system, and make it appear as though it has been sent by the
- >operator or any other user on the system. Unless Of-course he has access to the
- >operator/other persons account !!!!!
-
- > Curiocity !!!!!!
-
- Its a rather simple exercise to forge email from anyone at anywhere.
- I of course am not going to say how its done, other than to say it's
- pretty trivial to accomplish this. Basically I could send you mail from
- root on your machine without ever having logged in or been near that
- machine.
-
- James
-
-