MS patches Exchange 2000 email spy bug

The Register: “Crackers could ferret their way into a victim’s email by exploiting the way that
Exchange 2000 allows users to access their in-boxes over the Web.

Microsoft has issued a patch; the flaw revolves around the interaction between
Outlook Web Access and Internet Explorer in handling message attachments.”