Qualcomm Eudora Long Attachment Filename Denial Of Service Vulnerability

Bugtraq ID:	7026
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Mar 05 2003 12:00AM
Updated:	Mar 05 2003 12:00AM
Credit:	Discovery of this issue is credited to David Fernandez Madrid <[email protected]>.
Vulnerable:	Qualcomm Eudora 6.0 Qualcomm Eudora 5.1.1 Qualcomm Eudora 5.1 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Qualcomm Eudora 5.0.2 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0
Not Vulnerable:	Qualcomm Eudora 5.2

Qualcomm Eudora Long Attachment Filename Denial Of Service Vulnerability

Eudora may crash when handling messages which contain attachments with excessively long filenames. This condition reportedly occurs when messages with malformed attachment filenames are stored in the user's mailbox, which could result in a persistent denial of service to the mail client.

This issue may be a variant of the vulnerability described in BID 1210.

Qualcomm Eudora Long Attachment Filename Denial Of Service Vulnerability

Solution:
It has been reported that this issue is addressed in Eudora 5.2.

Qualcomm Eudora Long Attachment Filename Denial Of Service Vulnerability

References:

• DoS Vulnerability in Eudora (Securiteam)
  
• Eudora Product Homepage (Qualcomm)
  
• Eudora Upgrade Page (Qualcomm)
  
• Eudora 6.0 attachment spoof, exploit ([email protected] (Paul Szabo))