Lucene search

K
cve[email protected]CVE-2002-0456
HistoryAug 12, 2002 - 4:00 a.m.

CVE-2002-0456

2002-08-1204:00:00
web.nvd.nist.gov
21
information security
software vulnerability
eudora
nvd
exploits
cve-2002-0456

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

62.2%

Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames.

Affected configurations

NVD
Node
qualcommeudoraMatch5.1
CPENameOperatorVersion
qualcomm:eudoraqualcomm eudoraeq5.1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

62.2%

Related for CVE-2002-0456