Description
Eudora 5.0.2 allows a remote attacker to read arbitrary files via an email with the path of the target file in the "Attachment Converted" MIME header, which sends the file when the email is forwarded to the attacker by the user.
References
- 2616 vdb-entry
- eudora-plain-text-attachment(6431) vdb-entry
- 3085 vdb-entry
- 20010418 Eudora file leakage problem (still) mailing-list