What is the severity of CVE-2005-1671?

CVE-2005-1671 is classified as a medium severity vulnerability that can lead to exposure of sensitive information.

How do I fix CVE-2005-1671?

To address CVE-2005-1671, it is recommended to upgrade to a later version of Yahoo Messenger that resolves this logging issue.

Which versions of Yahoo Messenger are affected by CVE-2005-1671?

CVE-2005-1671 affects Yahoo Messenger versions 5.5, 5.6, and 6.0.

What type of data can be exposed by CVE-2005-1671?

CVE-2005-1671 can potentially expose sensitive information logged in the ypager.log file due to improper handling of the logging feature.

Is CVE-2005-1671 exploitable by local users?

Yes, CVE-2005-1671 can be exploited by local users as it does not provide proper warnings when the logging feature is enabled.

Vulnerability/
CVE-2005-1671

low

2.1

CWE

NVD-CWE-Other

19/5/2005

7/8/2024

CVE-2005-1671

First published: Thu May 19 2005(Updated: )

The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and does not properly warn later users that the feature has been enabled, which allows local users to obtain sensitive information from other users.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Yahoo Messenger	=5.6
Yahoo Messenger	=5.5
Yahoo Messenger	=5.6.0.1351
Yahoo Messenger	=6.0

Never miss a vulnerability like this again

Reference Links

http://marc.info/?l=bugtraq&m=111643475210982&w=2

Frequently Asked Questions

What is the severity of CVE-2005-1671?
CVE-2005-1671 is classified as a medium severity vulnerability that can lead to exposure of sensitive information.
How do I fix CVE-2005-1671?
To address CVE-2005-1671, it is recommended to upgrade to a later version of Yahoo Messenger that resolves this logging issue.
Which versions of Yahoo Messenger are affected by CVE-2005-1671?
CVE-2005-1671 affects Yahoo Messenger versions 5.5, 5.6, and 6.0.
What type of data can be exposed by CVE-2005-1671?
CVE-2005-1671 can potentially expose sensitive information logged in the ypager.log file due to improper handling of the logging feature.
Is CVE-2005-1671 exploitable by local users?
Yes, CVE-2005-1671 can be exploited by local users as it does not provide proper warnings when the logging feature is enabled.

collector/nvd-historical
collector/nvd-index
agent/type
agent/softwarecombine
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/weakness
agent/author
agent/severity
agent/last-modified-date
agent/references
agent/tags
agent/description
agent/event
agent/source
vendor/yahoo
canonical/yahoo messenger
version/yahoo messenger/5.6
version/yahoo messenger/5.5
version/yahoo messenger/5.6.0.1351
version/yahoo messenger/6.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.