PT-2002-2388 · Yahoo · Yahoo! Messenger

Published 2002-12-31 · Updated 2016-10-18 · CVE-2002-1664

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Yahoo! Messenger versions prior to February 2002

Description The issue allows remote attackers to add arbitrary users to another user's buddy list, which could lead to obtaining sensitive information.

Recommendations For versions prior to February 2002, update to a version released after February 2002 to resolve the issue.

Fix

Related Identifiers

CVE-2002-1664

Affected Products

Yahoo! Messenger

References · 4

• http://cert.org/advisories/CA-2002-16.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-1664 · Security Note
• http://kb.cert.org/vuls/id/393195 · Note
• http://marc.info/?l=bugtraq&m=101439616623230&w=2 · Note