home *** CD-ROM | disk | FTP | other *** search
- FOR IMMEDIATE RELEASE:
-
- Application: Yahoo! NEWS TICKER
- Platforms : Win95,98,NT
-
- Advisory:
-
- The installation process of the Yahoo! NEWS TICKER
- leaves a file name "install.log" in the program
- directory. The file contains plaintext userid and
- password.
-
- The installation process also sets registry entries
- under hkey_local_machine/software/netcontrols/ticker
- that contain the plaintext userID and password.
-
-
- Each yahoo account uses the same password/userid for
- all parts including auctions, news, my.yahoo,
- classifieds, and most importantly, EMAIL!!!!
-
- this is an independant finding not a release by Yahoo!.
-
- Advisory by CSB 24MARCH99
-
- <end of transmission>
-
-
-
-