PT-2002-1507 · Qualcomm · Eudora

Publicado 2002-06-11 · Atualizado 2016-10-18 · CVE-2002-0456

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Eudora versions 5.1 and earlier

Description The issue concerns how Eudora stores attachments in a directory with a fixed name. This could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames.

Recommendations For versions 5.1 and earlier, consider changing the directory where attachments are stored to a location with a less predictable pathname to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0456

Produtos afetados

Eudora

Referências · 5

• http://securityfocus.com/archive/1/262704 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0456 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=101622857703677&w=2 · Nota
• http://securityfocus.com/bid/4306 · Aviso do Fabricante
• http://iss.net/security_center/static/8487.php · Aviso do Fabricante