Re: Security bugs in interactions between IE 5.x, IIS 5.0 and Exchange 2000

[Chad Kalmes]

I've tested this out and the query seems to run fine 
and returns the stated information, but only if the 
exchange resources via the web don't require 
authentication.  If they do, you need to know the other 
user's password in order to list out the directory 
contents.  

Who would allow web access to a mail server that 
does not require the user to authenticate to view their 
mail?   Basic security settings seem to prevent this 
from being an issue.

Chad Kalmes