260589 - X-Mozilla-Status headers in incoming emails

Status: RESOLVED DUPLICATE of bug 196749

(MailNews Core :: Security, defect)

Description

[Kevin Peuhkurinen]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20040913
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20040913

X-Mozilla-Status and X-Mozilla-Status2 headers in incoming emails over-ride the
headers that Mozilla Mail adds to the email.   This allows spammers to bypass
junk mail controls and to label their emails as "Important" or "To-Do".

Reproducible: Always
Steps to Reproduce:
1. Telnet to your MTA port 25
2. Create an email with X-Mozilla-Status headers:

...
354 Enter message, ending with "." on a line by itself
X-Mozilla-Status: 0001
X-Mozilla-Status2: 02000000
From: me
To: me <[e-mail]>
Subject: test

Test
.
250 OK

3. Check incoming email.  

Actual Results:  
The email is marked "read" and labelled "Important".   It has two
"X-Mozilla-Status" and "X-Mozilla-Status2" headers, but the forged one
over-rides the one added by my MUA.


Expected Results:  
Ignored or stripped off the status headers of the incoming email.

Comment 1

[Frank Wein [:mcsmurf]]

*** This bug has been marked as a duplicate of 196749 ***