CVE-2002-2351
Qualcomm Eudora 5.1 - Path Traversal via Trailing Dot in Attachment Name
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2002-2351. PoCs published by Paul Szabo.
AI-analyzed exploit summary This Perl script demonstrates a spoofing vulnerability in Eudora 6.1.1 where file extensions can be misrepresented to bypass warning dialogs, potentially tricking users into executing malicious attachments. It crafts a MIME email with embedded HTML and RTF constructs to exploit the flaw.
Description
Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with names containing a trailing "." (dot).
Exploits (2)
This Perl script demonstrates a spoofing vulnerability in Eudora 6.1.1 where file extensions can be misrepresented to bypass warning dialogs, potentially tricking users into executing malicious attachments. It crafts a MIME email with embedded HTML and RTF constructs to exploit the flaw.
This Perl script demonstrates a spoofing vulnerability in Eudora 6.0 where file extensions and names of attachments can be manipulated to bypass warning dialogs and execute arbitrary code. It crafts a MIME email with various techniques to exploit the flaw, including embedded CR characters and HTML/RTF inclusions.