[38903] in bugtraq
Re: Yahoo! Messenger may be storing all session data 'Unencoded'
daemon@ATHENA.MIT.EDU (Torseq Tech.)
Wed May 18 15:57:42 2005
Date: 19 May 2005 02:01:50 -0000
Message-ID: <20050519020150.28510.qmail@www.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: "Torseq Tech." <bindshell@gmail.com>
To: bugtraq@securityfocus.com
In-Reply-To: <20050518171643.29971.qmail@www.securityfocus.com>
The newly-made available Yahoo! Messenger 7.0 beta build 224 also stores the same information in clear-text as 5.x - 6.0 versions do when the Logfile is enabled (tested on Windows only). Yahoo! Messenger 7.0 was just made available several hours ago in a beta form. Hopefully later builds won't have this 'feature' altogether.
