CVE-2000-0342
HIGHQualcomm Eudora 4.x - Improper Link Resolution Before File Access
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2000-0342. PoCs published by Paul Szabo.
AI-analyzed exploit summary This exploit leverages a vulnerability in Eudora's LaunchProtect feature to spoof attachments and trick users into executing arbitrary files. It demonstrates how malicious attachments can be disguised using MIME encoding and HTML constructs to bypass warnings.
Description
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."
Exploits (4)
This exploit leverages a vulnerability in Eudora's LaunchProtect feature to spoof attachments and trick users into executing arbitrary files. It demonstrates how malicious attachments can be disguised using MIME encoding and HTML constructs to bypass warnings.
This exploit leverages a flaw in Eudora's LaunchProtect mechanism to bypass warnings for executable attachments. It crafts a malicious email with spoofed attachments pointing to system executables (e.g., calc.exe) or batch files, tricking users into executing them without proper warnings.
This Perl script demonstrates a spoofing vulnerability in Eudora 6.0 on Windows, allowing attackers to manipulate file extensions and execute arbitrary code via crafted MIME messages with embedded carriage return characters.
The exploit describes a technique to bypass Eudora's executable attachment warning by using a crafted HTML link in an email, tricking users into executing arbitrary files without prompts. It leverages the lack of warning for non-standard executable extensions.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N