CVE-2005-1671
First published: Thu May 19 2005(Updated: )
The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and does not properly warn later users that the feature has been enabled, which allows local users to obtain sensitive information from other users.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Yahoo Messenger | =5.6 | |
| Yahoo Messenger | =5.5 | |
| Yahoo Messenger | =5.6.0.1351 | |
| Yahoo Messenger | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/yahoo
- canonical/yahoo messenger
- version/yahoo messenger/5.6
- version/yahoo messenger/5.5
- version/yahoo messenger/5.6.0.1351
- version/yahoo messenger/6.0