Vulnerability Development: Re: jump2.eudora.com

[Brad Griffin <b.griffin () cqu edu au>]

Hi folks.
You may find that the simplest 'Windows' way of blocking this is to add
jump2.eudora.com to your hosts file and reference it to 127.0.0.1
Eudora will *think* it has connected to jump2, but won't find what it's
looking for and will give up.
Just a thought,
Cheers,
Gryph
-----Original Message-----
From: VULN-DEV List [mailto:VULN-DEV () SECURITYFOCUS COM]On Behalf Of Matt
Zimmerman
Sent: Monday, August 28, 2000 2:12 PM
To: VULN-DEV () SECURITYFOCUS COM
Subject: Re: jump2.eudora.com


On Sun, Aug 27, 2000 at 04:32:58PM -0400, William Daskaluk wrote:


- The OS and version running on the origin host
- The version of Eudora running on the origin host
- The fact that the origin host is probably used for reading mail
- A hint that the origin host is probably a single-user system (where
security
  tends to be weaker)

Probably harmless in most situations, but there should be an option to
disable
this check for the benefit of security-paranoid and privacy-conscious users.

--
 - mdz