[security-alerts] FW: [SA18713] The Bat! RFC-822 Mail Header Spoofing Weakness

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

;-)

> 
> 
> TITLE:
> The Bat! RFC-822 Mail Header Spoofing Weakness
> 
> SECUNIA ADVISORY ID:
> SA18713
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/18713/
> 
> CRITICAL:
> Not critical
> 
> IMPACT:
> Spoofing
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> The Bat! 2.x
> http://secunia.com/product/2840/
> 
> DESCRIPTION:
> 3APA3A has discovered a weakness in The Bat!, which can be exploited
> by malicious people to conduct spoofing attacks.
> 
> The weakness is caused due to an error in the representation of
> RFC-822 headers for certain specially crafted partial mail messages.
> This can e.g. be exploited to spoof the "Received" header when
> viewing a malicious mail with "View -> RFC-822 headers" enabled.
> 
> The weakness has been confirmed in version 2.12.04. Other versions
> may also be affected.
> 
> SOLUTION:
> Update to version 3.5 or later.
> http://www.ritlabs.com/en/products/thebat/download.php
> 
> PROVIDED AND/OR DISCOVERED BY:
> 3APA3A
> 
> ORIGINAL ADVISORY:
> http://www.security.nnov.ru/advisories/thebatspoof.asp
> 
> ----------------------------------------------------------------------