(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack\n\nThe
remote host is running a version of the Eudora mail client that may be vulnerable to a DoS
attack. Specifically, a remote user can create a DoS attack by sending a file with an
exceptionally long name. This does not cause an exploitable buffer overflow but crashes
the program.
Solution: Upgrade to Version 5.2 or higher.
CVE Not available
Qualcomm Eudora File Attachment Spoofing Vulnerability
PVS ID: 1284 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nBy spoofing file extensions, an attacker may be able to coerce malicious code
execution\n\nThe remote client is running a version of the Eudora mail client that may be
vulnerable to an issue where a remote attacker may spoof the file extension in an
attachment. This may aid the attacker in enticing a user of the email client into executing
malicious content, and in avoiding generating warning messages.
Solution: Upgrade to the latest version of Eudora
CVE-2002-2351
Qualcomm Eudora MIME Multipart Boundary Buffer Overflow Vulnerability
PVS ID: 1285 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote client is
running a version of the Eudora mail client that may be vulnerable to a buffer overflow.
This condition may occur if a MIME multipart boundary is of excessive length. Remote
attackers may exploit this vulnerability to execute arbitrary code.
Solution: Upgrade to the latest version of Eudora
CVE-2002-0833
Qualcomm Eudora WebBrowser Control Embedded Media Player File Vulnerability
PVS ID: 1286 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an arbitrary 'command insertion'
flaw\n\nThe remote host is running a version of the Eudora mail client that may have
vulernabilities regarding how it handles attachments. Specifically if the client is using the
WebBrowser control to view messages, then an attacker may be able to craft a message
containing malicious code that will be run on the victims computer.
Solution:
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 328