Eudora 6.2.0.7 - Attachment Spoofer

Eudora 6.2.0.7 - Attachment Spoofer !/usr/bin/perl -- use MIME::Base64; print "From: me\n"; print "To: you\n"; print "Subject: Eudora 6.2.0.7 on Windows spoof\n"; print "MIME-Version: 1.0\n"; print "Content-Type: multipart/mixed; boundary="zzz"\n"; print "X-Use: Pipe the output of this script...

Eudora 6.2.0.7 Attachment Spoofer Exploit

Exploit for unknown platform in category remote exploits ========================================= Eudora 6.2.0.7 Attachment Spoofer Exploit ========================================= !/usr/bin/perl -- use MIME::Base64; print "From: me\n"; print "To: you\n"; print "Subject: Eudora 6.2.0.7 on Windo...

Eudora 6.2.0.7 attachment spoof

Eudora 6.2.0.7 for Windows is in beta testing since 8 Oct 2004. The release notes http://www.eudora.com/download/eudora/windows/6.2/Betas/RelNotes.txt say: SECURITY -------- Fixed cases where attachments could be spoofed via base64 or quoted-printable encoded plain-text, inline MIME parts. Not so...

Eudora 6.2.0.7 - Attachment Spoofer

!/usr/bin/perl -- use MIME::Base64; print "From: me\n"; print "To: you\n"; print "Subject: Eudora 6.2.0.7 on Windows spoof\n"; print "MIME-Version: 1.0\n"; print "Content-Type: multipart/mixed; boundary="zzz"\n"; print "X-Use: Pipe the output of this script into: sendmail -i victim\n\n"; print...

Eudora 6.2.0.7 Attachment Spoofer Exploit

No description provided by source. !/usr/bin/perl -- use MIME::Base64; print "From: me\n"; print "To: you\n"; print "Subject: Eudora 6.2.0.7 on Windows spoof\n"; print "MIME-Version: 1.0\n"; print "Content-Type: multipart/mixed; boundary="zzz"\n"; print "X-Use: Pipe the output of this script...

[SA12730] BugPort Unspecified Attachment Handling Vulnerability

TITLE: BugPort Unspecified Attachment Handling Vulnerability SECUNIA ADVISORY ID: SA12730 VERIFY ADVISORY: http://secunia.com/advisories/12730/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: BugPort 1.x http://secunia.com/product/2957/ DESCRIPTION: Eduardo Correia has...

Microsoft Windows - JPEG GDI+ Remote Heap Overflow (MS04-028)

/ GDI+ JPEG Remote Exploit By John Bissell A.K.A. HighT1mes Exploit Name: ============= JpegOfDeath.c v0.5 Date Exploit Released: ====================== Sep, 23, 2004 Description: ============ Exploit based on FoToZ exploit but kicks the exploit up a notch by making it have reverse connectback as...

mozilla -- vCard stack buffer overflow

Georgi Guninski discovered a stack buffer overflow which may be triggered when viewing email messages with vCard attachments...

HastyMail HTML Attachment Content-Disposition Header XSS

Binary data 2167.prm...

HastyMail HTML Attachment Script Execution

The remote host is running HastyMail, a PHP-based mail client application. The installed version contains a flaw caused by email attachments not being properly defined int he Content-Disposition HTTP header. An attacker could exploit this flaw to inject Javascript or ActiveX code in an attachment...

SMTP Server Inbound .exe Attachment Detection

Binary data 1173.prm...

Qualcomm Eudora File Attachment Spoofing Vulnerability

Binary data 1284.prm...

Qualcomm Eudora Hidden Attachment Execution Vulnerability

Binary data 1287.prm...

Qualcomm Eudora Attachment Filename Handling Overflow (deprecated)

Binary data 1324.prm...

Microsoft Outlook Express for MacOS HTML Attachment Automatic Download Vulnerability

Binary data 1293.prm...

F-PROT Attachment Handling DoS

Binary data 4593.prm...

CVE-2004-0668

Web Access in Lotus Domino 6.5.1 allows remote attackers to cause a denial of service server crash via a large e-mail message, as demonstrated using a large image attachment...

osTicket Arbitrary Attachment Disclosure

The target is running at least one instance of osTicket that enables a remote user to view attachments associated with any existing ticket. These attachments may contain sensitive information. %NASLMINLEVEL 70300 This script was written by George A. Theall, . See the Nessus Scripts License for...

osTicket Form Field Modification File Upload Size Restriction Bypass

The target is running at least one instance of osTicket that enables a remote user to a open new ticket with an attachment of unlimited size. An attacker could exploit this vulnerability and cause a denial of service by filling up the filesystem used for attachments. %NASLMINLEVEL 70300 This scri...

Eudora 6.1.2 attachment spoof

Eudora 6.1.2 for Windows was released on 21 June 2004. The release notes http://www.eudora.com/download/eudora/windows/6.1.2/RelNotes.txt say: SECURITY Fixed case where attachments could be spoofed via base64 encoded plain-text, inline MIME parts. Not so. Harmless demo below. Cheers, Paul Szabo -...