analogic / MailServer / issues / #81 - Security Issue: User can send from other Domain — Bitbucket

Issue #81 invalid

Michael Schmid created an issue 2016-05-05

Hello guys, I found a security issue.

When I log in in my thunderbird as let's say marc@awesome.de I can spoof the sender to send emails from sam@asdfasdf.de.

Regarding this security issues, because after a smtp account gets hacked, the hacker can send spam mails using any sender he likes.

Comments (2)

SH repo owner
- changed status to invalid
Sadly it's not bug it's nature of smtp protocol...
- 2016-05-06T05:52:32+00:00
Michael Schmid reporter
Are you sure? Because when I send an E-Mail from Gmail with another sender, it changes the sender back to the original one.
- 2016-05-06T09:09:15+00:00
Log in to comment

Assignee: –

Type: bug

Priority: critical

Status: invalid

Votes: 0

Watchers: 1

Jira: the preferred issue tracker for Bitbucket. Join the team!