PT-2002-2388 · Yahoo · Yahoo! Messenger

Publicado 2002-12-31 · Atualizado 2016-10-18 · CVE-2002-1664

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Yahoo! Messenger versions prior to February 2002

Description The issue allows remote attackers to add arbitrary users to another user's buddy list, which could lead to obtaining sensitive information.

Recommendations For versions prior to February 2002, update to a version released after February 2002 to resolve the issue.

Correção

Identificadores relacionados

CVE-2002-1664

Produtos afetados

Yahoo! Messenger

Referências · 4

• http://kb.cert.org/vuls/id/393195 · Nota
• http://marc.info/?l=bugtraq&m=101439616623230&w=2 · Nota
• http://cert.org/advisories/CA-2002-16.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2002-1664 · Nota de Segurança