PT-2001-1861 · Qualcomm · Eudora

Published 2001-09-20 · Updated 2017-10-10 · CVE-2001-0677

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Eudora version 5.0.2

Description: The issue allows a remote attacker to read arbitrary files by sending an email with the path of the target file in the Attachment Converted MIME header. When the email is forwarded to the attacker by the user, the file is sent.

Recommendations: For Eudora version 5.0.2, consider disabling the forwarding of emails with attachments to minimize the risk of exploitation until a patch is available. Restrict access to sensitive files on the system to reduce the potential impact of this issue.

Exploit

Fix

Related Identifiers

CVE-2001-0677

Affected Products

Eudora

References · 5

• 🔥 http://securityfocus.com/archive/1/177369 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0677 · Security Note
• http://securityfocus.com/bid/2616 · Note
• http://osvdb.org/3085 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6431 · Note