Home  >  CVE-2002-1664
CVE Details for CVE: CVE-2002-1664
Summary
Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information.
Timestamps
Last major update 18-10-2016 - 02:27
Published 31-12-2002 - 05:00
Last modified 18-10-2016 - 02:27
References
Vulnerable Configurations
  • cpe:2.3:a:yahoo:messenger:5.0:*:*:*:*:*:*:*
    cpe:2.3:a:yahoo:messenger:5.0:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
6.4
Impact
4.9
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL NONE
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:P/I:P/A:N
refmap via4
bugtraq 20020221 Remote crashes in Yahoo messenger
cert CA-2002-16
cert-vn VU#393195