Vulnerability Description
Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Eudora | 5.1 |
References
- http://marc.info/?l=bugtraq&m=101622857703677&w=2
- http://www.iss.net/security_center/static/8487.phpVendor Advisory
- http://www.securityfocus.com/archive/1/262704Vendor Advisory
- http://www.securityfocus.com/bid/4306Vendor Advisory
- http://marc.info/?l=bugtraq&m=101622857703677&w=2
- http://www.iss.net/security_center/static/8487.phpVendor Advisory
- http://www.securityfocus.com/archive/1/262704Vendor Advisory
- http://www.securityfocus.com/bid/4306Vendor Advisory
FAQ
What is CVE-2002-0456?
CVE-2002-0456 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and r...
How severe is CVE-2002-0456?
CVE-2002-0456 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2002-0456?
Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Eudora.