Tickets :: Comment on [#14748] mailsploit vulnerability

* Your Email Address
* Spam protection	Enter the letters below: .. .. __..__. \|\|_/ \| (__ \| \| \__\|\| \\|___.__)\|__\|
Comment	>> many client are affected by 'mailsploit': https://www.mailsploit.com/index >> >> Basically the attacker uses special characters inside encoded words >> to spoof the sender: >> >> From: >> =?utf-8?b?cG90dXNAd2hpdGVob3VzZS5nb3Y=?==?utf-8?Q?=00?==?utf-8?b?cG90dXNAd2hpdGVob3VzZS5nb3Y=?=@mailsploit.com >> >> Such header naively decoded incorrectly is: >> potus@whitehouse.gov\0potus@whitehouse.gov@mailsploit.com >> >> IMP fail to decode / parse the RFC5322.From Header correctly > > > there is a MAAWG Recommendation document: > https://www.m3aawg.org/sites/default/files/m3aawg-unicode-best-practices-2016-02.pdf >
Attachment
Watch this ticket