Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
RITLabs The Bat! before 3.0.0.15 displays certain important headers from encapsulated data in message/partial MIME messages, instead of the real headers, which is in violation of RFC2046 header merging rules and allows remote attackers to spoof the origin of e-mail by sending a fragmented message, as demonstrated using spoofed Received: and Message-ID: headers.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ritlabs The Bat! 报头欺骗漏洞
Vulnerability Description
RITLabs The Bat! 3.0.0.15之前版本只显示消息/部分MIME消息中压缩数据的某些重要报头而不是真实报头，这违背了RFC2046报头合并规则，并允许远程攻击者通过发送分段消息来伪装成电子邮件的发送者，如演示中使用的伪装过的Received:和Message-ID:报头。
CVSS Information
N/A
Vulnerability Type
N/A