CVE-2002-0322: Yahoo Messenger

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Yahoo! Messenger 4.0 sends user passwords in cleartext, which could allow remote attackers to gain privileges of other users via sniffing.

Affected products

• Yahoo Messenger: version 4.0 only

Published 2002-06-25. Last modified 2026-06-16.