Re: Fake headers on Internet mail

Article View: comp.security.misc

Article #264

Back to comp.security.misc Previous Next

#264

From: Alan J Rosenthal
Date: Thu, 13 Aug 1992 14:14

11 lines
934 bytes

sherer@lub001.lamar.edu writes:
>My question is, is there a way to masquerade as someone else in e-mail?

It's easy.  If your machine is going to believe my machine when it says that
it's forwarding mail from x@y, then anyone who controls my machine can forge
mail to you from x@y.  This is an intrinsic problem which can only be solved by
cryptographic techniques.

However, it's worse than it might be because your system may very well make it
easy for users to forge mail to each other on the same machine.  I know mine
does; I can telnet to the smtp port and tell it I'm whoever I want.

Technical Details

Message-ID: <1992Aug13.101443.16501@jarvis.csri.toronto.edu>

Path: arc1-ca.pugleaf.net!sparky!uunet!utcsri!dgp.toronto.edu!flaps

References: <1992Aug12.151404.1424@lub001.lamar.edu>

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!sparky!uunet!utcsri!dgp.toronto.edu!flaps
Newsgroups: comp.security.misc
From: flaps@dgp.toronto.edu (Alan J Rosenthal)
Subject: Re: Fake headers on Internet mail
Message-ID: <1992Aug13.101443.16501@jarvis.csri.toronto.edu>
References: <1992Aug12.151404.1424@lub001.lamar.edu>
Date: 13 Aug 92 14:14:43 GMT
Lines: 11

Reply to Parent Message