- This topic has 18 replies, 9 voices, and was last updated 21 years, 2 months ago by
.
-
Posts
-
Hey everyone,
I have found 2 dangerous exploits in MSN Messenger and Yahoo! Messenger. I have put the working solution for them.
I am just waiting to know if it possible to post details on the exploit, or whether it is better to get in touch with Yahoo! Security first.
Any thoughts?
Thanks
[/size][/font]Welcome to BBB raladin, and thank you for your concern!
I really do hope your concern will be addressed by Yahoo! Security once they got the details.
well whats the exploit its nice to know but what should we be looking for here and how do we no if were in danger?:confused:
I chatted briefly with Raladin and he seems sincere. I gave him the procedure for contacting Yahoo, but he had already used that a week ago and still hadn’t heard back from them.
Raladin, you might consider contacting Secunia.com — a legitimate site that tracks security holes in a number of popular products.
Is this just for a newer version of yahoo messenger or is this all versions?.. im still running an older version of yahoo am i in jepordy too?
Found another exploit, and a new solution (working one). The second exploit is much easier to use than the first and is nearly 100% working.. and sure the solution blocks alot of hackers to use that exploit.. even using the best cracking tools and monitoring tools..
BTW: Exploits are found in Yahoo! and MSN Messengers (new and old versions and under any Windows version)
Regards
Ok! well as a matter of fact they are a matter of concern for us all the AIM users, i have noticed that you have not suggested any precautions to protect ourselves from them? tell us what everyone of us should do to safeguard oursleves?
Well, you can’t do anything.. as it is in the core of the these IMs.. I’m really sorry I can’t explain more.. I’m waiting a reply from the Yahoo! Security Team Leader who said he will reply within a week..
So then, I may explain what to do (what they need to do really for their software..)
Thanks!
Well i just hope Yahoo! will reach you before malicious users “exploit” these vulnerabilities. :rolleyes:
“Well, you can’t do anything.. as it is in the core of the these IMs.. I’m really sorry I can’t explain more.. I’m waiting a reply from the Yahoo! Security Team Leader who said he will reply within a week..
So then, I may explain what to do (what they need to do really for their software..)”
Waiting for a reply within a week sounds familiar as I’ve heard this before as well when reporting vulnerabilities to them affecting their software BUT I’ve yet to talk to a “Yahoo! Security Team Leader”… usually the e-mail replies are simply and generically signed ‘Yahoo! Security Contact’. I understand the reasoning behind you not wanting to give any details out but I really do think that it’s something small if anything that you’re making a big deal about. Statements like “as it is in the core of the these IMs” and the whole hacking/cracking thing sounds brutally indescriptive covered in a cloud of probable hype. Not trying to offend you but more than likely you just think that whatever you’ve found is a “critical” flaw when in reality it’s probably not too serious. Not trying to really downplay your finding(s). Provide a tad of detail/insight and maybe it might seem more believable.
- You must be logged in to reply to this topic.