PT-2002-1390 · Yahoo · Yahoo! Messenger

Publicado 2002-05-03 · Atualizado 2016-10-18 · CVE-2002-0321

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Yahoo! Messenger version 5.0

Description The issue allows remote attackers to spoof other users by modifying the username and using the spoofed username for social engineering or denial of service (flooding) attacks.

Recommendations For Yahoo! Messenger version 5.0, update to a newer version that addresses this issue to prevent user spoofing and related attacks.

Correção

Identificadores relacionados

CVE-2002-0321

Produtos afetados

Yahoo! Messenger

Referências · 6

• http://securityfocus.com/bid/4164 · Aviso do Fabricante
• http://cert.org/advisories/CA-2002-16.html · Nota
• http://kb.cert.org/vuls/id/952875 · Nota
• http://marc.info/?l=bugtraq&m=101439616623230&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0321 · Nota de Segurança
• http://iss.net/security_center/static/8267.php · Aviso do Fabricante