According to this story in the latest RISKS digest, Network Solutions is using a change of address database to update its customer data into which — allegedly — anyone can enter information without any kind of verification.
Yet another way to steal a domain name?