Security Operations

570 readers

1 users here now

A place for all things Cyber Security, from questions, rants, and stories, to the latest attacks, vulnerabilities, and zero days.

founded 1 year ago

MODERATORS

[email protected]

Introducing SMTP Smuggling: A novel technique for spoofing e-mails (r.sec-consult.com)

submitted 11 months ago by [email protected] to c/[email protected]

3 comments fedilink hide all child comments

Introducing SMTP Smuggling: A novel technique for spoofing e-mails::undefined

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 3 points 11 months ago (1 children)

Whoa, having been in IT since the dawn of time I'm impressed this relatively simple attack on smtp worked.

Prepare for a humongous inrush of spam before servers patch this one.

[–] [email protected] 3 points 11 months ago

Prepare for a humongous inrush of spam before servers patch this one.

But it's already patched by GMX and Microsoft.

As far as I understand it, it doesn't affect single mail servers, but only mail systems where you have separate inbound and outbound servers and the outbound servers trust the data they get from the inbound servers.