CERTA-2005-AVI-045
Vulnerability from certfr_avis - Published: 2005-02-03 - Updated: 2005-02-03None
Description
Eudora est un client de messagerie électronique.
Plusieurs vulnérabilités dans Eudora permettent à un utilisateur mal
intentionné d'exécuter du code arbitraire à distance avec les privilèges
de l'utilisateur exécutant Eudora.
Solution
Mettre à jour Eudora en version 6.2.1.
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des
correctifs (cf. section Documentation).
Eudora versions 6.2.0 et antérieures.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eEudora versions 6.2.0 et ant\u00e9rieures.\u003c/p\u003e",
"content": "## Description\n\nEudora est un client de messagerie \u00e9lectronique. \nPlusieurs vuln\u00e9rabilit\u00e9s dans Eudora permettent \u00e0 un utilisateur mal\nintentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance avec les privil\u00e8ges\nde l\u0027utilisateur ex\u00e9cutant Eudora.\n\n## Solution\n\nMettre \u00e0 jour Eudora en version 6.2.1. \nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [],
"initial_release_date": "2005-02-03T00:00:00",
"last_revision_date": "2005-02-03T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Eudora du 25 janvier 2005 :",
"url": "http://www.eudora.com/security.html"
},
{
"title": "Site Internet de Eudora :",
"url": "http://www.eudora.com"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 NGS Research du 02 f\u00e9vrier 2005 :",
"url": "http://www.ngssoftware.com/advisories/eudora-01.txt"
}
],
"reference": "CERTA-2005-AVI-045",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2005-02-03T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": null,
"title": "Vuln\u00e9rabilit\u00e9 de Eudora",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 de NGS Research du 02/02/2005",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…