Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Is the info that's put into the mail headers a security risk?

Discussion in 'Security' started by damainman, Sep 19, 2004.

  1. damainman

    damainman Well-Known Member

    Joined:
    Nov 13, 2003
    Messages:
    515
    Likes Received:
    0
    Trophy Points:
    166
    Today while testing out some emails, i noticed that the users Cpanel account name is inserted into the headers.

    I sent a email from SquirrelMail on my server, to a aol account. When looking in the header i noticed this:

    Received: from CPANELACCOUNTNAME by server.mydomain.net with local (Exim 4.42)

    Wouldn't inserting the account name used to log into cpanel create a security risk, or is it not that serious?
     
    #1 damainman, Sep 19, 2004
  2. elleryjh

    elleryjh Well-Known Member

    Joined:
    Apr 12, 2003
    Messages:
    479
    Likes Received:
    0
    Trophy Points:
    166
    Well it exposes the user name, so a cracker is one step closer to brute forcing on that account, but tracing spam is made much easier with this info.
     
    #2 elleryjh, Sep 19, 2004
(You must log in or sign up to post here.)
Loading...
Similar Threads - info that's mail
  1. Seyed

    Webmail Login Failure | Correct login information

    Seyed, Dec 13, 2018, in forum: E-mail Discussion
    Replies:
    19
    Views:
    465
    cPanelMichael
    Dec 17, 2018
  2. cjsmiff

    How to use mbstring and fileinfo

    cjsmiff, Nov 7, 2018, in forum: EasyApache
    Replies:
    5
    Views:
    179
    cPanelMichael
    Nov 12, 2018
  3. Nirjonadda

    In Progress [CPANEL-23606] cPanel Security Advisor missing kernel information when kernelcare is installed

    Nirjonadda, Oct 19, 2018, in forum: General Discussion
    Replies:
    12
    Views:
    347
    cPanelLauren
    Dec 12, 2018
  4. Zurrie

    Mail Client Manual Settings Information SSL and non-SSL

    Zurrie, Sep 13, 2018, in forum: E-mail Discussion
    Replies:
    3
    Views:
    201
    cPanelMichael
    Sep 14, 2018
  5. uk01

    php-fpm allows phpsysinfo?

    uk01, Sep 3, 2018, in forum: Security
    Replies:
    8
    Views:
    269
    uk01
    Oct 9, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice