OSVDB ID: 6869

Title: Yahoo! Messenger Client IP Address Disclosure

Info

Disclosure

Feb 21, 2002

Discovery

Feb 21, 2002

Dates

Exploit

Unknown

Solution

Unknown

Description

Yahoo Messenger contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when an attacker sends a message and the victim responds to the malicious message occurs, which will disclose victim's IP address information resulting in a loss of confidentiality.

Classification

Location: Remote / Network Access
Attack Type: Information Disclosure
Impact: Loss of Confidentiality
Exploit: Exploit Unknown

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Yahoo Inc. has released a patch to address this vulnerability.

Products

Yahoo! Inc.

Messenger

5.0

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/6869