Insecure Password Authentication in Yahoo! Messenger

["vuln-dev" <vuln-dev () bugtraq org>]

Hi fellow users! 

The members of GOBBLES Research have discovered a flaw in the authentication 
protocol for Yahoo! Messenger.  Attached to this letter is a full disclosure 
advisory + discussion of the vulnerability.  At this time there is no "fix" 
available. 

Thanks for all your support! 

The GOBBLES Research Team
http://www.bugtraq.org

Attachment: GOBBLES-04.txt
Description: