Signature Detail
Short Name |
SMTP:EMAIL:EUDORA-SPOOF3 |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
SMTP |
Keywords |
Eudora Spoofed Attachment in Message Body |
Release Date |
2004/03/24 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SMTP: Eudora Spoofed Attachment in Message Body
This signature detects attempts to spoof an e-mail attachment. Eudora Windows versions prior to up to 6.0.3 are vulnerable. Attackers can send a maliciously crafted e-mail with an illegal "Attachment Converted:" line in the message body to spoof attachments, which can lead to remote code execution.
Extended Description
Successful exploitation of the vulnerability may allow execution of arbitrary code in the context of Eudora, and may gain unauthorized access to a vulnerable system.
References