(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote host is
running a version of Yahoo Instant Messenger that is vulnerable to a buffer overflow in the
code that processes user-initiated file transfer requests. A successful attacker would be able
to execute malicious code under the same privileges that Yahoo! Messenger is running
under.
Solution: Upgrade to the latest version of Yahoo Instant Messenger.
CVE-2004-0043
Yahoo! Messenger Peer To Peer File Sharing Detection
PVS ID: 1272 FAMILY: Internet Messengers
RISK:
MEDIUM
NESSUS ID:11993
Description: The remote host is running the Yahoo! Messenger Peer To Peer application.
Solution: Ensure that this activity matches corporate standards and security guidelines.
CVE Not available
Yahoo! Messenger Detection
PVS ID: 1273 FAMILY: Internet Messengers RISK: LOW NESSUS ID:Not Available
Description: The remote host is running a Yahoo Instant Messenger client.
Solution: Ensure this software meets corporate guidelines for employee use.
CVE Not available
AOL Instant Messenger aim:goaway URI Handler goaway Function Away Message Handling Remote
Overflow
PVS ID: 1274 FAMILY: Internet Messengers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote host is
running AOL Instant Messenger (AIM). In versions 5.5.3595 and 5.5, a remote attacker can
execute arbitrary code to gain unauthorized access on the client's machine by sending a
specially crafted overly long 'Away' message through a link or a malicious website.
Solution: Upgrade to AOL Instant Messenger 5.9 or later.
CVE-2004-0636
Yahoo! Messenger Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 1275 FAMILY: Internet Messengers RISK: INFO NESSUS ID:Not Available
Family Internet Services 325