Results 1 to 10 of 10

Thread: YIM Exploit

  1. December 5th, 2003, 07:03 AM #1
    freealans
    freealans is offline
    Junior Member
    Join Date
    Oct 2003
    Posts
    8

    YIM Exploit

    I wasn't quite sure where to throw this, but this is a yim exploit that was posted yesterday.

    http://lists.netsys.com/pipermail/fu...er/014434.html
    Reply With Quote Reply With Quote
  2. December 5th, 2003, 10:44 AM #2
    FallenZen
    FallenZen is offline
    Junior Member
    Join Date
    Nov 2003
    Posts
    22
    That's good to know about. Thanks for that.

    -Zen
    \"We change by the speed of the choices that we make.\"
    Reply With Quote Reply With Quote
  3. December 5th, 2003, 12:48 PM #3
    Jehnny
    Jehnny is offline
    Banned
    Join Date
    Sep 2002
    Posts
    222
    Thanks for posting this, freealans. I haven't been paying attention to bugtraq like I usually do as of late because I've been really busy, but this is actually a program that I use, so I thank you.
    Reply With Quote Reply With Quote
  4. December 5th, 2003, 01:55 PM #4
    PM8228
    PM8228 is offline
    Banned
    Join Date
    Apr 2002
    Posts
    456
    Thanks a lot. Have you tried exploiting yourself just to test, or if you would like help, please contact me.

    AIM: Wix 555 Lesser Evil
    MSN: wix_555_the_lesser_evil@hotmail.com

    I will make a Yahoo account when it is needed if you would like.

    -Cheers-
    Reply With Quote Reply With Quote
  5. December 5th, 2003, 07:19 PM #5
    Tedob1
    Tedob1 is offline
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,785
    looks like this requires the user to go to a malicious web-site.
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”
    Reply With Quote Reply With Quote
  6. December 5th, 2003, 07:25 PM #6
    Jehnny
    Jehnny is offline
    Banned
    Join Date
    Sep 2002
    Posts
    222
    Yeah, it does. It requires them to go there and an ActiveX control is run that overflows the dll file. You can't just IM someone and make it work, hehe.
    Reply With Quote Reply With Quote
  7. December 5th, 2003, 08:05 PM #7
    D0pp139an93r
    D0pp139an93r is offline
    @ÞΜĮЙǐЅŦГǻţΩЯ D0pp139an93r's Avatar
    Join Date
    May 2003
    Location
    St. Petersburg, FL
    Posts
    1,705
    Wow, thanks. I've been using YIM for a while.
    Real security doesn't come with an installer.
    Reply With Quote Reply With Quote
  8. December 5th, 2003, 08:25 PM #8
    mafo00
    mafo00 is offline
    Member
    Join Date
    Aug 2002
    Posts
    37
    I really appreciate the heads up , will delete the file ASAP. YIM is so much better than AIM or MSN .
    Reply With Quote Reply With Quote
  9. December 5th, 2003, 08:47 PM #9
    Tedob1
    Tedob1 is offline
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,785
    i dint know but i was told that yahoo auto-updates and this vuln only affects ver 5.6.0.1347 and below
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”
    Reply With Quote Reply With Quote
  10. December 6th, 2003, 12:46 AM #10
    PM8228
    PM8228 is offline
    Banned
    Join Date
    Apr 2002
    Posts
    456
    I thought you had a website or website or would make one

    Pretty cool though.

    -Cheers-
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules