PT-2002-1391 · Yahoo · Yahoo! Messenger

Publicado 2002-05-03 · Atualizado 2016-10-18 · CVE-2002-0322

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Yahoo! Messenger version 4.0

Description The issue allows remote attackers to gain privileges of other users via sniffing because user passwords are sent in cleartext.

Recommendations For Yahoo! Messenger version 4.0, consider using a secure connection to encrypt password transmissions until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0322

Produtos afetados

Yahoo! Messenger

Referências · 4

• http://marc.info/?l=bugtraq&m=101467298107635&w=2 · Nota
• http://securityfocus.com/bid/4173 · Nota
• http://marc.info/?l=bugtraq&m=101466489113920&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0322 · Nota de Segurança