Unscored CVE-2002-0472 EUVD-2002-0469GHSA-5fj2-ghpc-2v79

MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows rem…

Published Jun 11, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users.

References

20020319 Potential vulnerabilities of the Microsoft RVP-based Instant Messaging mailing-list
msn-messenger-message-spoofing(8582) vdb-entry
http://www.encode-sec.com/esp0202.pdf
4316 vdb-entry