Closed Bug 1267968 Opened 8 years ago Closed 8 years ago

[ver45.0]You can send e-mails as other people. This might be harmfull

Categories

(Thunderbird :: Message Compose Window, defect)

Product:
Thunderbird
Component:
Message Compose Window
Version:
45 Branch
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 1254666

People

(Reporter: mihai.smeumare, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Build ID: 20160407164938

Steps to reproduce:

1.I have updated today to 45.0
2.Right Click on an e-mail sent by a colleague.
3.Edit as new.
4.Fill the desired e-mail.
5.Send.


Actual results:

The e-mail looks as if it was sent by my colleague.
(From: colleague@email.com)


Expected results:

The e-mail should be sent "From: Me@email.com".
This bug might cause a lot of issues and even "identity thefts".
Group: mail-core-security
Component: Account Manager → Message Compose Window
(In reply to Mihai Smeu mare from comment #0)
> This bug might cause a lot of issues and even "identity thefts".

Yes, but it is the job of the SMTP server to reject such spoofing emails. You can create such emails with spoofed sender in TB even before this bug existed.
Status: UNCONFIRMED → RESOLVED
Closed: 8 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.