summaryrefslogtreecommitdiff
path: root/content/entry/siue-unauthenticated-smtp-server.md
diff options
context:
space:
mode:
Diffstat (limited to 'content/entry/siue-unauthenticated-smtp-server.md')
-rw-r--r--content/entry/siue-unauthenticated-smtp-server.md2
1 files changed, 1 insertions, 1 deletions
diff --git a/content/entry/siue-unauthenticated-smtp-server.md b/content/entry/siue-unauthenticated-smtp-server.md
index c3883e8..cb8e6dc 100644
--- a/content/entry/siue-unauthenticated-smtp-server.md
+++ b/content/entry/siue-unauthenticated-smtp-server.md
@@ -5,7 +5,7 @@ tags: ['computing', 'siue']
draft: false
---
# Email Server
-During my last semester at [SIUe](https://siue.edu), one of my professors demonstrated spoofing an email using an unauthenticated SMTP server (smtp.siue.edu) on the university network. I believe the server is still present on the network despite being reported multiple times to IT. It isn't accessible on the public internet, only through the university's network that all students have easy access to. Non-students could also gain access to the network fairly easily while at the university and therefore have access to the email server.
+During my last semester at [SIUe](https://www.siue.edu/), one of my professors demonstrated spoofing an email using an unauthenticated SMTP server (smtp.siue.edu) on the university network. I believe the server is still present on the network despite being reported multiple times to IT. It isn't accessible on the public internet, only through the university's network that all students have easy access to. Non-students could also gain access to the network fairly easily while at the university and therefore have access to the email server.
The email server has no authentication whatsoever. You don't have to offer any credentials to send emails. You can't read others' emails, however. This means you don't even need to be a student to send emails. As a non-student, you can access the email server through Telnet and send emails as any student, professor, faculty or staff member. With that, you can send out emails to any email lists. This unauthenticated server has been present on the network for years according to other students I have talked to.