PT-2002-1523 · Microsoft · Msn Messenger Service

Publicado 2002-06-11 · Atualizado 2008-09-05 · CVE-2002-0472

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MSN Messenger Service version 3.6

Description The issue allows remote attackers to spoof messages from other users due to weak authentication when exchanging messages between clients.

Recommendations For MSN Messenger Service version 3.6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-0472

Produtos afetados

Msn Messenger Service

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-0472 · Nota de Segurança
• http://encode-sec.com/esp0202.pdf · Nota
• http://securityfocus.com/archive/1/262906 · Aviso do Fabricante
• http://iss.net/security_center/static/8582.php · Aviso do Fabricante
• http://securityfocus.com/bid/4316 · Aviso do Fabricante