MTNL Server Vuberability | Delhi

[viralbug]

although this shows you can access anyone's account, it cannot be used to use their connection because of port binding. there wont be any use just looking at the session history. that said, MTNL should take care of this and account information sholdnt be visible to anyone except the person whsoe account it is.if someone does change the password, you can always ask the cc to reset your passwod to default (CA no.) and then change it back.

 

[dark_horizon]

if someone does change the password, you can always ask the cc to reset your passwod to default (CA no.) and then change it back.



^^ What if the hacker also calls up MTNL and asks them to reset the pw..... and then change it back ?

 

[amish]

i think u have to call from that same number

 

[viralbug]

they call on that number for a confirmation too i think.

 

[genexed]

I doubt port binding is activated on all lines. I have used my friend's username/pw on my router and it worked!. But since I have unlm connection I cant take great use of that.