Vulnerabilities > CVE-2002-1664 - Information Disclosure vulnerability in Yahoo Messenger 5.0

047910
CVSS 6.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
yahoo

Summary

Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information.

Vulnerable Configurations

Part Description Count
Application
Yahoo
1