CVE-2004-2005

CVE-2004-2005 describes a buffer overflow in Eudora for Windows versions 5.2.1, 6.0.3, and 6.1. An attacker could trigger remote arbitrary code execution by sending an email containing (1) a link to a long URL to the C drive or (2) a long attachment name. The provided documents do not specify a p...

CVE-2004-1944

CVE-2004-1944 affects Eudora 6.1 and 6.0.3 for Windows, where processing a deeply nested multipart MIME message can cause a remote denial-of-service (crash). The available sources confirm the affected product and the crash impact, but no patch/version remediation details are provided in the docum...

CVE-2004-2005

Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with 1 a link to a long URL to the C drive or 2 a long attachment name...

CVE-2004-1944

Eudora 6.1 and 6.0.3 for Windows allows remote attackers to cause a denial of service crash via a deeply nested multipart MIME message...

Eudora Internet Mail Server for Mac OS USER Overflow

The remote poppassd daemon crashes when a too long name is sent after the USER command. It might be possible for a remote attacker to run arbitrary code on this machine. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17295; scriptversion"1.14";...

CVE-2004-1521

The CVE-2004-1521 issue affects Eudora 6.2.0.14 where forwarding an email containing base64 or quoted-printable encoded attachments fails to warn, enabling a remote attacker to read arbitrary files via spoofed Converted headers. The underlying cause is improper handling/validation of encoded atta...

CVE-2004-1521

Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed "Converted" headers...

[VulnWatch] High Risk Vulnerabilities in Eudora Mail Client

John Heasman of NGSSoftware has discovered multiple high risk vulnerabilities in the Windows version of Eudora. Versions affected include: Eudora 6.2.0 and below The flaws permit execution of arbitrary code via: 1 previewing or opening a specially crafted email 2 opening specially crafted...

Eudora mail reader multiple vulnerabilities

Multiple vulnerabilities lead to ability of code execution with specially crafted e-mail message of mailbox file...

Qualcomm Eudora < 6.2.1 Unspecified Remote Overflows

Binary data 2588.prm...

CVE-2004-2301

Eudora before 6.1.1 allows remote attackers to cause a denial of service crash via an e-mail with a long "To:" field, possibly due to a buffer overflow...

CVE-2004-1521

Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed "Converted" headers...

CVE-2004-2649

Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large number of characters e.g. spaces coded as "&32" in the middle of the URL...

KLA10302 DoS vulnerability in Eudora

A buffer overflow was found in Eudora. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed e-mail message. Original advisories Release note Related products Qualcom-Eudora CVE list CVE-2004-2301 warnin...

eudora62014.txt

Eudora 6.2 ==6.2.0.14 for Windows was released on 8 Nov 04. The release notes http://www.eudora.com/download/eudora/windows/6.2/RelNotes.txt say: SECURITY -------- Fixed cases where attachments could be spoofed via base64 or quoted-printable encoded plain-text, inline MIME parts. Some cases remai...

Attachment spoofing code execution in Eudora

If "attach" and "attach.exe" co-exist in message and "attach" is clicked, "attach.exe" will be silently executed instead...

Eudora 6.2 attachment spoof

Eudora 6.2 ==6.2.0.14 for Windows was released on 8 Nov 04. The release notes http://www.eudora.com/download/eudora/windows/6.2/RelNotes.txt say: SECURITY -------- Fixed cases where attachments could be spoofed via base64 or quoted-printable encoded plain-text, inline MIME parts. Some cases remai...

Eudora 6.2.0.7 Attachment Spoofer Exploit

Exploit for unknown platform in category remote exploits ========================================= Eudora 6.2.0.7 Attachment Spoofer Exploit ========================================= !/usr/bin/perl -- use MIME::Base64; print "From: me\n"; print "To: you\n"; print "Subject: Eudora 6.2.0.7 on Windo...

Eudora 6.2.0.7 Attachment Spoofer Exploit

No description provided by source. !/usr/bin/perl -- use MIME::Base64; print "From: me\n"; print "To: you\n"; print "Subject: Eudora 6.2.0.7 on Windows spoof\n"; print "MIME-Version: 1.0\n"; print "Content-Type: multipart/mixed; boundary="zzz"\n"; print "X-Use: Pipe the output of this script...

Eudora 6.2.0.7 attachment spoof

Eudora 6.2.0.7 for Windows is in beta testing since 8 Oct 2004. The release notes http://www.eudora.com/download/eudora/windows/6.2/Betas/RelNotes.txt say: SECURITY -------- Fixed cases where attachments could be spoofed via base64 or quoted-printable encoded plain-text, inline MIME parts. Not so...