Qualcomm Eudora File Attachment Spoofing Vulnerability

Medium Nessus Network Monitor Plugin ID 1284

Synopsis

By spoofing file extensions, an attacker may be able to coerce malicious code execution

Description

The remote client is running a version of the Eudora mail client that may be vulnerable to an issue where a remote attacker may spoof the file extension in an attachment. This may aid the attacker in enticing a user of the email client into executing malicious content, and in avoiding generating warning messages.

Solution

Upgrade to the latest version of Eudora

Plugin Details

Severity: Medium

ID: 1284

File Name: 1284.prm

Family: SMTP Clients

Published: 2004/08/20

Modified: 2016/02/05

Dependencies: 1331

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 6.4

Temporal Score: 5.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Temporal Vector: CVSS2#E:F/RL:OF/RC:ND

CVSSv3

Base Score: 6.4

Temporal Score: 5.9

Vector: CVSS3#AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Temporal Vector: CVSS3#E:F/RL:O/RC:X

Reference Information

CVE: CVE-2002-2351

BID: 5432, 7653