Eudora 6.2.0.7 - Attachment Spoofer

!/usr/bin/perl -- use MIME::Base64; print "From: me\n"; print "To: you\n"; print "Subject: Eudora 6.2.0.7 on Windows spoof\n"; print "MIME-Version: 1.0\n"; print "Content-Type: multipart/mixed; boundary="zzz"\n"; print "X-Use: Pipe the output of this script into: sendmail -i victim\n\n"; print...

Eudora 6.2.0.7 attachment spoof

Eudora 6.2.0.7 for Windows is in beta testing since 8 Oct 2004. The release notes http://www.eudora.com/download/eudora/windows/6.2/Betas/RelNotes.txt say: SECURITY -------- Fixed cases where attachments could be spoofed via base64 or quoted-printable encoded plain-text, inline MIME parts. Not so...

Qualcomm Eudora < 5.2 Long Attachment Filename Handling DoS

Binary data 1283.prm...

Qualcomm Eudora Client and Path Disclosure Vulnerability

Binary data 1288.prm...

Qualcomm Eudora Attachment Filename Handling Overflow (deprecated)

Binary data 1324.prm...

Qualcomm Eudora Mail Client Detection

Binary data 1331.prm...

QUALCOMM Eudora IMAP Client literal_size Remote Overflow

Binary data 1097.prm...

Qualcomm Eudora 4.2/4.3 Warning Message Circumvention Vulnerability

Binary data 1289.prm...

Qualcomm Eudora File Attachment Spoofing Vulnerability

Binary data 1284.prm...

Eudora Long URL Status Bar Obfuscation

Binary data 1218.prm...

Qualcomm Eudora Hidden Attachment Execution Vulnerability

Binary data 1287.prm...

Qualcomm Eudora MIME Multipart Boundary Buffer Overflow Vulnerability

Binary data 1285.prm...

Qualcomm Eudora WebBrowser Control Embedded Media Player File Vulnerability

Binary data 1286.prm...

Eudora 6.1.2 attachment spoof

Eudora 6.1.2 for Windows was released on 21 June 2004. The release notes http://www.eudora.com/download/eudora/windows/6.1.2/RelNotes.txt say: SECURITY Fixed case where attachments could be spoofed via base64 encoded plain-text, inline MIME parts. Not so. Harmless demo below. Cheers, Paul Szabo -...

EudExploit_private.pl

Author: LibX [email protected] Date: 29-06-2004 Exploit : 1 Program: Eudora Tested on: v5.1 / v6.0.1.1 / v6.0.22 / v6.0.3 All English NT/2K/XP all service packs Exploit Type: Local Buffer overflow Shellcode: Shellcode to execute a command Shellcode version: v2.5 PRIVATE GENERIC How-tu-use:...

eudoraURL.txt

There is a buffer overflow in Eudora for Windows, verified on versions 6.1, 6.0.3 and 5.2.1. This is easily exploitable to run arbitrary code. I do not know if this issue affects Eudora for Macs. Demo: !/usr/bin/perl -- print "From: me\n"; print "To: you\n"; print "Subject: Eudora file URL buffer...

Qualcomm Eudora 6.x - Embedded Hyperlink URI Obfuscation

Qualcomm Eudora 6.x - Embedded Hyperlink URI Obfuscation source: https://www.securityfocus.com/bid/10305/info It has been reported that the Qualcomm Eudora MTA is prone to a URI obfuscation weakness that may hide the true contents of a link. The problem occurs when a user@location URI is formatte...

Qualcomm Eudora 6.x - Embedded Hyperlink URI Obfuscation

source: https://www.securityfocus.com/bid/10305/info It has been reported that the Qualcomm Eudora MTA is prone to a URI obfuscation weakness that may hide the true contents of a link. The problem occurs when a user@location URI is formatted in such a way that a "^A" control character is located...

Eudora buffer overflow

Buffer overflow on clicking oversized URL...

[Full-Disclosure] Eudora file URL buffer overflow

There is a buffer overflow in Eudora for Windows, verified on versions 6.1, 6.0.3 and 5.2.1. This is easily exploitable to run arbitrary code. I do not know if this issue affects Eudora for Macs. Demo: !/usr/bin/perl -- print "From: men"; print "To: youn"; print "Subject: Eudora file URL buffer...