CGISecurity Logo

Yahoo Hacker Uses Story to Find, Exploit Bug

"Exploit code has hit the Internet for the critical flaws in Yahoo
Messenger that could enable a remote hacker to take control of a user’s
system.

Yahoo Inc. was quick out of the gate and released a fix for
the vulnerabilities last Friday, just two days after the flaws were
publicly disclosed. The trouble is that Terrell Karlsten, a spokeswoman
for Yahoo, apparently disclosed too much information about the bugs in
an interview with InformationWeek.

And that information helped lead a hacker, who identifies himself only as "Danny," right to the flawed code. "

Article Link: http://www.darkreading.com/document.asp?doc_id=126185&WT.svl=cmpnews1_3