Yahoo! Messenger Local Insecure Default Installation Vulnerability

BID:12585

Info

Yahoo! Messenger Local Insecure Default Installation Vulnerability

Bugtraq ID: 12585
Class: Configuration Error
CVE: CVE-2005-0242
Remote: No
Local: Yes
Published: Feb 18 2005 12:00AM
Updated: Jul 12 2009 10:06AM
Credit: Carsten Eiram is credited with the discovery of this issue.
Vulnerable: Yahoo! Messenger 6.0 .0.1750
Yahoo! Messenger 6.0 .0.1643
Yahoo! Messenger 6.0
Yahoo! Messenger 5.6 .0.1358
Yahoo! Messenger 5.6 .0.1356
Yahoo! Messenger 5.6 .0.1355
Yahoo! Messenger 5.6 .0.1351
Yahoo! Messenger 5.6 .0.1347
Yahoo! Messenger 5.6
Yahoo! Messenger 5.5 .1249
Yahoo! Messenger 5.5
Yahoo! Messenger 5.0 .1232
Yahoo! Messenger 5.0 .1065
Yahoo! Messenger 5.0 .1046
Yahoo! Messenger 5.0
- Microsoft Windows 2000 Professional SP2
 - Microsoft Windows 2000 Professional SP1
 - Microsoft Windows 2000 Professional
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows ME
- Microsoft Windows NT Workstation 4.0 SP6a
 - Microsoft Windows NT Workstation 4.0 SP5
 - Microsoft Windows NT Workstation 4.0 SP4
 - Microsoft Windows NT Workstation 4.0 SP3
 - Microsoft Windows NT Workstation 4.0 SP2
 - Microsoft Windows NT Workstation 4.0 SP1
 - Microsoft Windows NT Workstation 4.0
 - Microsoft Windows XP Home
Not Vulnerable: Yahoo! Messenger 6.0 .0.1921

Discussion

Yahoo! Messenger Local Insecure Default Installation Vulnerability

A local insecure default installation vulnerability affects Yahoo! Messenger. This issue is due to a failure of the application to properly secure directories and executables when installation takes place.

A local attacker may leverage this issue to have arbitrary code executed with the privileges of an unsuspecting user; this may facilitate privileges escalation.

Exploit / POC

Yahoo! Messenger Local Insecure Default Installation Vulnerability

No exploit is required to leverage this issue.

Solution / Fix

Yahoo! Messenger Local Insecure Default Installation Vulnerability

Solution:
The vendor has released an upgrade dealing with this issue.


Yahoo! Messenger 5.0 .1065

Yahoo! Messenger 5.0 .1046

Yahoo! Messenger 5.0

Yahoo! Messenger 5.0 .1232

Yahoo! Messenger 5.5

Yahoo! Messenger 5.5 .1249

Yahoo! Messenger 5.6 .0.1358

Yahoo! Messenger 5.6

Yahoo! Messenger 5.6 .0.1347

Yahoo! Messenger 5.6 .0.1351

Yahoo! Messenger 5.6 .0.1356

Yahoo! Messenger 5.6 .0.1355

Yahoo! Messenger 6.0 .0.1643

Yahoo! Messenger 6.0

Yahoo! Messenger 6.0 .0.1750

References

Yahoo! Messenger Local Insecure Default Installation Vulnerability

References:
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report