PT-2002-1390 · Yahoo · Yahoo! Messenger

Published 2002-05-03 · Updated 2016-10-18 · CVE-2002-0321

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Yahoo! Messenger version 5.0

Description The issue allows remote attackers to spoof other users by modifying the username and using the spoofed username for social engineering or denial of service (flooding) attacks.

Recommendations For Yahoo! Messenger version 5.0, update to a newer version that addresses this issue to prevent user spoofing and related attacks.

Fix

Related Identifiers

CVE-2002-0321

Affected Products

Yahoo! Messenger

References · 6

• http://securityfocus.com/bid/4164 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0321 · Security Note
• http://iss.net/security_center/static/8267.php · Vendor Advisory
• http://cert.org/advisories/CA-2002-16.html · Note
• http://kb.cert.org/vuls/id/952875 · Note
• http://marc.info/?l=bugtraq&m=101439616623230&w=2 · Note