Provided by Aanval (Snort & Syslog Intrusion Detection and Correlation Engine) www.aanval.com
--
GEN:SID | 1:2458 |
Message | CHAT Yahoo IM successful chat join |
Summary | This event is generated when a host in your network that has Yahoo Instant Messenger running has joined a chat room or is examining chat rooms to join. |
Impact | Possible policy violation. Instant Messenger programs may not be appropriate in certain network environments. |
Detailed Information | Yahoo IM provides a means of allowing users who share similar interests to join a chat room and exchange messages. While there are no known exploits associated with exchanging messages, this type of activity may not be appropriate in certain network environments. |
Affected Systems | Any host running Yahoo Instant Messenger. |
Attack Scenarios | No known attacks. |
Ease of Attack | No known attacks. |
Corrective Action | Disallow the use of IM clients on the protected network and enforce or implement an organization wide policy on the use of IM clients. |
Additional References | Yahoo Protocol http://www.cse.iitb.ac.in/~varunk/YahooProtocol.htm |
--
DID:358081
--
http://www.aanval.com/