medium5.0Public exploit code
CVE-2004-1521
Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it ea…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Eudora 6.0.3 (Windows) - Attachment Spoofing2004-03-19 · remote · windows · Verified
Impact
Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed "Converted" headers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Eudora | Version 6.2.0.14 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110037078519691&w=2
- http://marc.info/?l=ntbugtraq&m=110053102601655&w=2
- http://packetstormsecurity.nl/0411-exploits/eudora62014.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18064
- http://marc.info/?l=bugtraq&m=110037078519691&w=2
- http://marc.info/?l=ntbugtraq&m=110053102601655&w=2
- http://packetstormsecurity.nl/0411-exploits/eudora62014.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18064