Home › Forums › Archives › Instant Messaging › Yahoo! Messenger Support › Warning New SEVERE Yahoo! Account Exploit
- This topic has 11 replies, 7 voices, and was last updated 18 years, 12 months ago by luckylandin.
-
AuthorPosts
-
May 7, 2005 at 5:18 pm #18209UnSaKreDMember
Currently, there is a Yahoo! exploit out that will allow you to steal ANYONES name.
Unfortunately there is no protection against this exploit.
So far, you can not however get into chat / messenger / profiles with the acccount yet.
BUT that doesnt mean you wont be able to in the future.
If you wish to see a demonstration, contact me on yahoo! and one will be given.
May 7, 2005 at 7:30 pm #121196sjnMemberUnSaKreD wrote:Currently, there is a Yahoo! exploit out that will allow you to steal ANYONES name.Unfortunately there is no protection against this exploit.
That’s disturbing. I have been using Yahoo for years, and find its programs and features to be the most user friendly. However, after reading this post (and others on this forum), I am having a lot of misgivings about it.Would you say that compared with MSN and AIM, Yahoo has the most vulnerabilities?
May 7, 2005 at 7:45 pm #121189NettiMemberunsakred, how can there be now way to stop it? Isn’t there always a way?
May 7, 2005 at 7:51 pm #121187Jeff HesterKeymasterUnSaKreD wrote:Currently, there is a Yahoo! exploit out that will allow you to steal ANYONES name.Unfortunately there is no protection against this exploit.
So far, you can not however get into chat / messenger / profiles with the acccount yet.
BUT that doesnt mean you wont be able to in the future.
If you wish to see a demonstration, contact me on yahoo! and one will be given.Has the vulnerability been reported to Yahoo! and/or reported to the IMpact Center? This is the only ethical thing to do.
I’m a little unclear on what it means to steal someone’s name, but yet you can’t get into chat with the account. What exactly CAN you get into?
May 7, 2005 at 8:45 pm #121192UnSaKreDMemberIt has been reported,
You can get into, mail/addressbook/notepad/buddy list/photos/groups/briefcase
So far the only thing not accessable, are the profiles/acct info/chat/messenger.
Although, I have not yet tested it by using YCHT protocol on a third party app for chat.
It seems plausable.
May 7, 2005 at 9:36 pm #121190NettiMemberOk unsakred, someone can use your name, log into your name, etc. but yet can’t change the info???
Or are you talking about the current temp and perm chat only bans that are currently running rampent on yahoo?
I know it’s not something to talk about in this forum, but if there is any thing more helpful that you can add without getting into it. lol
You had made the suggestion that you could do it, so is there something we could actually warn ppl NOT to do? do you know what I mean?
May 7, 2005 at 9:43 pm #121193UnSaKreDMemberHmm ok,
This will be hard to explain, without getting into it.
But, you are able to CREATE any name excluding illegals.
This gives you access to the account, or certain account information rather.
It has no primary bearing on your current account for the time being(excluding disclosing of information/privacy)
That I think is the most I can really tell you.
May 7, 2005 at 11:22 pm #121191NettiMemberI understand unsakred, and I really don’t want you to go into it any further. lol This is fine thanks!!!!
May 10, 2005 at 12:59 pm #121194UnSaKreDMemberpatched!
May 10, 2005 at 8:20 pm #121195SS_AntiHackerMembersjn wrote:Would you say that compared with MSN and AIM, Yahoo has the most vulnerabilities?No sjn, they all have a fair shares of vulnerabilities =P
May 10, 2005 at 10:53 pm #121188OreoMemberGreat to know it was there…even BETTER to know it was patched! Thanks for all the great info! đŸ™‚
May 11, 2005 at 3:36 am #121197luckylandinMemberDoes this mean that the problems w/ ppl being signed off of chat and losing their messenger has been patched?… reason I ask is that tonight, I set up ONE more ID…. and used it to go into a chat room and believe it or not, I got signed out of chat after about 20 minutes, but WAS able to log back into the same room. However, my hubby and another family member have not been able to retrieve their messenger ID’s back yet. I was able to finally get mine, but I refuse to use the good one in chat.
-
AuthorPosts
- You must be logged in to reply to this topic.