2005-05-28 04:00:00
mitre
PUBLISHED
Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another users buddy list and possibly obtain sensitive information.