Description
Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames.
References
- 20020316 MSIE vulnerability exploitable with Eudora (was: IncrediMail) mailing-list
- eudora-insecure-attachment-directory(8487) vdb-entry
- 20020315 RE: MSIE vulnerability exploitable with IncrediMail mailing-list
- 4306 vdb-entry