CVE-2025-61084

MDaemon Mail Server version 23.5.2 is vulnerable to an email spoofing attack due to improper input validation. The software validates SPF, DKIM, and DMARC using the email address enclosed in angle brackets () within the From: header of SMTP DATA. An attacker can craft a header containing multiple...

CVE-2025-61084

MDaemon Mail Server 23.5.2 validates SPF, DKIM, and DMARC using the email enclosed in angle brackets in the From: header of SMTP DATA. An attacker can craft a From: header with multiple invisible Unicode thin spaces to display a spoofed sender while passing validation, allowing email spoofing eve...

CVE-2025-61084

MDaemon Mail Server 23.5.2 validates SPF, DKIM, and DMARC using the email enclosed in angle brackets in the From: header of SMTP DATA. An attacker can craft a From: header with multiple invisible Unicode thin spaces to display a spoofed sender while passing validation, allowing email spoofing eve...