PT-2002-1507 · Qualcomm · Eudora

Published 2002-06-11 · Updated 2016-10-18 · CVE-2002-0456

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Eudora versions 5.1 and earlier

Description The issue concerns how Eudora stores attachments in a directory with a fixed name. This could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames.

Recommendations For versions 5.1 and earlier, consider changing the directory where attachments are stored to a location with a less predictable pathname to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0456

Affected Products

Eudora

References · 5

• http://securityfocus.com/archive/1/262704 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0456 · Security Note
• http://securityfocus.com/bid/4306 · Vendor Advisory
• http://iss.net/security_center/static/8487.php · Vendor Advisory
• http://marc.info/?l=bugtraq&m=101622857703677&w=2 · Note