Qualcomm Eudora File Attachment Spoofing Vulnerability

Medium Nessus Network Monitor Plugin ID 1284


By spoofing file extensions, an attacker may be able to coerce malicious code execution


The remote client is running a version of the Eudora mail client that may be vulnerable to an issue where a remote attacker may spoof the file extension in an attachment. This may aid the attacker in enticing a user of the email client into executing malicious content, and in avoiding generating warning messages.


Upgrade to the latest version of Eudora

Plugin Details

Severity: Medium

ID: 1284

File Name: 1284.prm

Family: SMTP Clients

Published: 2004/08/20

Modified: 2016/02/05

Dependencies: 1331

Risk Information

Risk Factor: Medium


Base Score: 6.4

Temporal Score: 5.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Temporal Vector: CVSS2#E:F/RL:OF/RC:ND


Base Score: 6.4

Temporal Score: 5.9


Temporal Vector: CVSS3#E:F/RL:O/RC:X

Reference Information

CVE: CVE-2002-2351

BID: 5432, 7653