Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Yahoo/Geocities possible exploit/vulnerability
From: "Jain, Siddhartha" <Siddhartha.Jain () kla-tencor com>
Date: Mon, 14 Aug 2006 17:02:22 -0700

Hi,

I was logged onto Yahoo Messenger (version 7.5 on WinXP SP2 Pro), when I
got a message from a friend's ID:
Pxxxx Bxxxxx (8/14/2006 4:25:50 PM):  --->
www.geocities.com/now_thats_funny_210/  

Clicking on the link took me to a page with the URL as above in the
address bar and yahoo/geocities page that asks for username and
password. On entering the username and password, the next page displayed
was my photo album on yahoo but the URL in the address bar still
remained the same as above!! 

Next thing I noticed that Yahoo Messenger had frozen.

I changed my yahoo password and un-installed Yahoo Messenger.

When I asked my friend about the message, he said he didn't send the
message but received a similar message from his wife in the morning who
hadn't sent it either.


- Siddhartha

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault