Unscored CVE-2008-5828 EUVD-2008-5798GHSA-j27v-pj6v-rp49

Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote …

Published Jan 2, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the (1) IPv4InternalAddrsAndPorts, (2) IPv4Internal-Addrs, and (3) IPv4Internal-Port header fields.

References

4862 third-party-advisory
20081229 MSN messenger sends IP addresses Public and Private mailing-list