News Exchange/Outlook Autodiscover Bug Spills Emails/Passwords in plain text

  • ATTENTION! As of November 1, 2020, you are not able to reply to threads 6 months after the thread is opened if there are more than 500 posts in the thread.
    Threads will not be locked, so posts may still be edited by their authors.
    Just start a new thread on the topic to post if you get an error message when trying to reply to a thread.

Wallace_n_Gromit

Senior Member
Autodiscover was first introduced in Exchange 2007.



As a kludge, Microsoft has begun registering autodiscover.* TLD's around the world since mid-September (BEFORE THE BAD GUYS DO) such as:

autodiscover.af autodiscover.tl autodiscover.pn autodiscover.ax autodiscover.gf autodiscover.pr autodiscover.as autodiscover.tf autodiscover.re autodiscover.ag autodiscover.gl autodiscover.rw autodiscover.am autodiscover.gp autodiscover.lc autodiscover.ac autodiscover.gt autodiscover.pm autodiscover.by autodiscover.gy autodiscover.st autodiscover.bj autodiscover.ht autodiscover.sn autodiscover.bi autodiscover.hn autodiscover.sc autodiscover.cm autodiscover.hk autodiscover.sl autodiscover.cl autodiscover.je autodiscover.sx autodiscover.do autodiscover.ke autodiscover.sk Security Now! #838 12 autodiscover.tl autodiscover.ly autodiscover.sb autodiscover.gf autodiscover.li autodiscover.so autodiscover.tf autodiscover.mg autodiscover.so autodiscover.gl autodiscover.mw autodiscover.gs autodiscover.af autodiscover.mq autodiscover.com.es autodiscover.ax autodiscover.yt autodiscover.org.es autodiscover.as autodiscover.mn autodiscover.ch autodiscover.ag autodiscover.ms autodiscover.tj autodiscover.am autodiscover.ma autodiscover.tg autodiscover.ac autodiscover.na autodiscover.tt autodiscover.by autodiscover.nz autodiscover.ug autodiscover.bj autodiscover.ni autodiscover.vi autodiscover.bi autodiscover.ng autodiscover.uz autodiscover.cm autodiscover.nf autodiscover.vu autodiscover.cl autodiscover.pa autodiscover.vn autodiscover.do autodiscover.pe autodiscover.wf


discussion of the Autodiscover bug begins 1:16:48 into Security Now show
 
Last edited:

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top