| tiêu đề | The Trusted Domain Project OpenDMARC 1.4.2 Improper Authentication |
|---|
| Mô tả | OpenDMARC 1.4.2 incorrectly rejects an entire DMARC record when an optional reporting-related tag contains an invalid value. Although malformed optional tags should be ignored after the required DMARC fields have been successfully parsed, OpenDMARC returns `dmarc=permerror` for the complete record.
As a result, a valid `p=reject` or `p=quarantine` policy may not be enforced when the record contains an invalid optional value, such as `fo=9`. A remote unauthenticated attacker can exploit this condition by sending forged messages from an affected domain, which may be treated as having no enforceable DMARC policy.
The issue can also be triggered deliberately by an attacker who is able to modify or influence the affected DMARC record, including through delegated DNS administration. Successful exploitation may allow forged messages to bypass the domain’s intended DMARC policy. |
|---|
| Nguồn | ⚠️ https://xuyongzhe-vt.github.io/share/opendmarc-bad-tag-drops-policy.html |
|---|
| Người dùng | yongzhe_xu (UID 100420) |
|---|
| Đệ trình | 07/08/2026 04:15 (cách đây 2 các tháng) |
|---|
| Kiểm duyệt | 27/09/2026 13:33 (2 months later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 410886 [Trusted Domain Project OpenDMARC đến 1.4.2 opendmarc_policy.c opendmarc_policy_parse_dmarc fo/rf/ri/pct/sp/adkim/aspf/rua/ruf nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|