PT-2002-1391 · Yahoo · Yahoo! Messenger

Published 2002-05-03 · Updated 2016-10-18 · CVE-2002-0322

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Yahoo! Messenger version 4.0

Description The issue allows remote attackers to gain privileges of other users via sniffing because user passwords are sent in cleartext.

Recommendations For Yahoo! Messenger version 4.0, consider using a secure connection to encrypt password transmissions until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0322

Affected Products

Yahoo! Messenger

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-0322 · Security Note
• http://marc.info/?l=bugtraq&m=101467298107635&w=2 · Note
• http://securityfocus.com/bid/4173 · Note
• http://marc.info/?l=bugtraq&m=101466489113920&w=2 · Note