high7.5Public exploit code
CVE-2000-0342
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Qualcomm Eudora 6.0.1/6.1.1 - Attachment LaunchProtect Warning Bypass (2)2003-11-25 · remote · windows · Verified
- Qualcomm Eudora 6.0.1/6.1.1 - Attachment LaunchProtect Warning Bypass (1)2003-11-25 · remote · windows · Verified
- Qualcomm Eudora 5.2.1/6.0 - File Attachment Spoofing Variant2003-05-22 · remote · windows · Verified
- Qualcomm Eudora 4.2/4.3 - Warning Message Circumvention2000-04-28 · dos · windows · Verified
Impact
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Eudora | Version 4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://news.cnet.com/news/0-1005-200-1773077.html?tag=st.ne.fd.lthd.1005-200-1773077
- http://www.peacefire.org/security/stealthattach/explanation.html
- http://www.securityfocus.com/bid/1157
- http://news.cnet.com/news/0-1005-200-1773077.html?tag=st.ne.fd.lthd.1005-200-1773077
- http://www.peacefire.org/security/stealthattach/explanation.html
- http://www.securityfocus.com/bid/1157