Tickets :: Comment on [#14748] mailsploit vulnerability

6.0.0-git

2019-07-18

Comment on [#14748] mailsploit vulnerability

* Your Email Address
* Spam protection	Enter the letters below: . ..__ .__. __..___ \|__\|\| \\| \|(__ [__ \| \|\|__/\|__\|.__)\|
Comment	> many client are affected by 'mailsploit': https://www.mailsploit.com/index > > Basically the attacker uses special characters inside encoded words > to spoof the sender: > > From: > =?utf-8?b?cG90dXNAd2hpdGVob3VzZS5nb3Y=?==?utf-8?Q?=00?==?utf-8?b?cG90dXNAd2hpdGVob3VzZS5nb3Y=?=@mailsploit.com > > Such header naively decoded incorrectly is: > potus@whitehouse.gov\0potus@whitehouse.gov@mailsploit.com > > IMP fail to decode / parse the RFC5322.From Header correctly
Attachment
Watch this ticket