Important Notice: We're experiencing email notification issues. If you've posted a question in the community forums recently, please check your profile manually for responses while we're working to fix this.

On Monday the 3rd of March, around 5pm UTC (9am PT) users may experience a brief period of downtime while one of our underlying services is under maintenance.

Avatar for Username

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊，或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

此討論串已被封存。 如果您有需要幫助，請新增一個新問題

Hi Team, This is for your information that we can alter sender email ID from thunderbird while sending out email to others and whichcanbeusedforemail spoofing

  • 1 回覆
  • 1 有這個問題
  • 1 次檢視
  • 最近回覆由 Matt

amathakur
amathakur
more options

Hi Team,

This is for your information that we can alter sender email ID from thunderbird version 45 or above while sending out email to others and which can be used for email spoofing.

Like i have configured my email id [abc@test.com] in thunderbird but while composing email I can easily edit the sender's/from email id [abc@test.com] to anything hyg@hello.com etc, which email id/domain is even not available or available.

By using this I can send the emails to any one.This can be used for email spoofing.

Please solve this bug.

Thanks, Amar

Hi Team, This is for your information that we can alter sender email ID from thunderbird version 45 or above while sending out email to others and which can be used for email spoofing. Like i have configured my email id [abc@test.com] in thunderbird but while composing email I can easily edit the sender's/from email id [abc@test.com] to anything hyg@hello.com etc, which email id/domain is even not available or available. By using this I can send the emails to any one.This can be used for email spoofing. Please solve this bug. Thanks, Amar

所有回覆 (1)

Matt
Matt
  • Moderator
  • Top 10 Contributor
more options

This is not a bug, it is feature introduced in version 45. It is not new.

See https://support.mozilla.org/en-US/kb/new-thunderbird-45 And the bug it arose from https://bugzilla.mozilla.org/show_bug.cgi?id=87987

Note that a well configured SMTP server will not allow mail to be sent from accounts the user does not have access to. But having the ability to change the sender yo the boss you are writing on behalf of is handy.