PT-2005-1322 · Yahoo · Yahoo! Messenger

Publicado 2005-02-18 · Atualizado 2008-09-05 · CVE-2005-0242

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Yahoo! Messenger version 6.0.0.1750

Description The issue allows attackers to execute arbitrary code by placing a malicious ping.exe program into the Messenger program directory. This is possible due to weak default permissions in the installation.

Recommendations For version 6.0.0.1750, consider changing the permissions of the Messenger program directory to prevent unauthorized access and execution of malicious programs. As a temporary workaround, restrict the execution of the ping.exe program from the Messenger directory until a proper fix is applied.

Exploit

Correção

Identificadores relacionados

CVE-2005-0242

Produtos afetados

Yahoo! Messenger

Referências · 4

• 🔥 http://secunia.com/secunia_research/2004-6/advisory · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0242 · Nota de Segurança
• http://secunia.com/advisories/11815 · Correção
• http://messenger.yahoo.com/security/update6.html · Nota