Microsoft MSN Messenger IP Address Information Disclosure Vulnerability
BID:33125
Info
Microsoft MSN Messenger IP Address Information Disclosure Vulnerability
| Bugtraq ID: | 33125 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 30 2008 12:00AM |
| Updated: | Jan 05 2009 11:22PM |
| Credit: | Carmelo Brancato |
| Vulnerable: |
Microsoft MSN Messenger Service 8.5.1 |
| Not Vulnerable: | |
Discussion
Microsoft MSN Messenger IP Address Information Disclosure Vulnerability
Microsoft MSN Messenger is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.
Microsoft MSN Messenger 8.5.1 is vulnerable; other versions may also be affected.
Microsoft MSN Messenger is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.
Microsoft MSN Messenger 8.5.1 is vulnerable; other versions may also be affected.
Exploit / POC
Microsoft MSN Messenger IP Address Information Disclosure Vulnerability
An attacker can use readily available network utilities to exploit this issue.
An attacker can use readily available network utilities to exploit this issue.
Solution / Fix
Microsoft MSN Messenger IP Address Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Microsoft MSN Messenger IP Address Information Disclosure Vulnerability
References:
References:
- MSN Messenger Homepage (Microsoft)
- MSN messenger sends IP addresses Public and Private (Carmelo Brancato)