CVE-2000-0342

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-59

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://news.cnet.com/news/0-1005-200-1773077.html?tag=st.ne.fd.lthd.1005-200-1773077Not Applicable, Vendor Advisory
http://www.peacefire.org/security/stealthattach/explanation.htmlExploit
http://www.securityfocus.com/bid/1157Broken Link, Third Party Advisory, VDB Entry
http://news.cnet.com/news/0-1005-200-1773077.html?tag=st.ne.fd.lthd.1005-200-1773077Not Applicable, Vendor Advisory
http://www.peacefire.org/security/stealthattach/explanation.htmlExploit
http://www.securityfocus.com/bid/1157Broken Link, Third Party Advisory, VDB Entry

Timeline

Published: Apr 28, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-034310.0Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FR CVE-2000-03445.0The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.CVE-2000-03452.1The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via th CVE-2000-03465.0AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web serve CVE-2000-03475.0Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.CVE-2000-034810.0A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain roo CVE-2000-03495.0Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.CVE-2000-03505.0A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and CVE-2000-03514.6Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages.CVE-2000-035210.0Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary command CVE-2000-035310.0Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from CVE-2000-03545.0mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory.