Skype Chat Logs Local Information Disclosure Vulnerability

Bugtraq ID:	51988
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Feb 13 2012 12:00AM
Updated:	Feb 13 2012 12:00AM
Credit:	Anonymous
Vulnerable:	Skype Technologies Skype 5.5.0.113 Skype Technologies Skype 5.5 Skype Technologies Skype 5.4 Skype Technologies Skype 5.3.0.120 Skype Technologies Skype 5.3 Skype Technologies Skype 5.0.0.105
Not Vulnerable:

Skype Chat Logs Local Information Disclosure Vulnerability

Skype is prone to a local information-disclosure vulnerability.

Exploiting this issue may allow a local attacker to obtain sensitive information that may aid in further attacks.

Skype Chat Logs Local Information Disclosure Vulnerability

Attackers require local interactive access to exploit this [email protected].

Skype Chat Logs Local Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Skype Chat Logs Local Information Disclosure Vulnerability

References:

• Skype Homepage (Skype Technologies)
  
• Skype v. 5.x.x - information disclosure (Full Disclosure mailing list archives)