CVE-2002-1664

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:P/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=101439616623230&w=2
http://www.cert.org/advisories/CA-2002-16.htmlPatch, Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/393195Third Party Advisory, US Government Resource
http://marc.info/?l=bugtraq&m=101439616623230&w=2
http://www.cert.org/advisories/CA-2002-16.htmlPatch, Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/393195Third Party Advisory, US Government Resource

Timeline

Published: Dec 31, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-16657.5Buffer overflow in Yahoo! Messenger before February 2002 allows remote attackers to cause a denial of service (crash) and possibly execute a CVE-2002-16665.0Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL/SQL procedures by mo CVE-2002-16672.1The virtual memory management system in FreeBSD 4.5-RELEASE and earlier does not properly check the existence of a VM object during page inv CVE-2002-16682.1HP-UX 11.11 and earlier allows local users to cause a denial of service (kernel deadlock), due to a "file system weakness" that is possibly CVE-2002-16692.1pkg_add in FreeBSD 4.2 through 4.4 creates a temporary directory with world-searchable permissions, which may allow local users to modify wo CVE-2002-16704.6Microsoft Windows XP Professional upgrade edition overwrites previously installed patches for Internet Explorer 6.0, leaving Internet Explor CVE-2002-16715.0Microsoft Internet Explorer 5.0, 5.01, and 5.5 allows remote attackers to monitor the contents of the clipboard via the getData method of th CVE-2002-16722.1Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could allow local users to re CVE-2002-16733.6The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows l CVE-2002-16741.2procfs on FreeBSD before 4.5 allows local users to cause a denial of service (kernel panic) by removing a file that the fstatfs function ref CVE-2002-16756.4Format string vulnerability in the Cio_PrintF function of cio_main.c in Unreal IRCd 3.1.1 allows remote attackers to cause a denial of servi CVE-2002-16762.1BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information (passwords) by deleting the HOSTCFG._N