CVE-2005-1671: Low severity Yahoo Messenger vulnerability
The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and does not properly warn later users that the feature has been enabled, which allows local users to obtain sensitive information from other users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1671?
CVE-2005-1671 is classified as a medium severity vulnerability that can lead to exposure of sensitive information.
How do I fix CVE-2005-1671?
To address CVE-2005-1671, it is recommended to upgrade to a later version of Yahoo Messenger that resolves this logging issue.
Which versions of Yahoo Messenger are affected by CVE-2005-1671?
CVE-2005-1671 affects Yahoo Messenger versions 5.5, 5.6, and 6.0.
What type of data can be exposed by CVE-2005-1671?
CVE-2005-1671 can potentially expose sensitive information logged in the ypager.log file due to improper handling of the logging feature.
Is CVE-2005-1671 exploitable by local users?
Yes, CVE-2005-1671 can be exploited by local users as it does not provide proper warnings when the logging feature is enabled.