Hi Team, This is for your information that we can alter sender email ID from thunderbird while sending out email to others and whichcanbeusedforemail spoofing
Hi Team,
This is for your information that we can alter sender email ID from thunderbird version 45 or above while sending out email to others and which can be used for email spoofing.
Like i have configured my email id [[email protected]] in thunderbird but while composing email I can easily edit the sender's/from email id [[email protected]] to anything [email protected] etc, which email id/domain is even not available or available.
By using this I can send the emails to any one.This can be used for email spoofing.
Please solve this bug.
Thanks, Amar
כל התגובות (1)
This is not a bug, it is feature introduced in version 45. It is not new.
See https://support.mozilla.org/en-US/kb/new-thunderbird-45 And the bug it arose from https://bugzilla.mozilla.org/show_bug.cgi?id=87987
Note that a well configured SMTP server will not allow mail to be sent from accounts the user does not have access to. But having the ability to change the sender yo the boss you are writing on behalf of is handy.