Products & Services
Support

Product Categories


Popular Downloads


Manage Software

How to Buy

For Home

Linksys Products Store
Linksys is now part of Belkin
Products for everyone

All Ordering Options

Training & Events Partners
Guest

Security Activity Bulletin

Risks of Instant Messaging Applications

 
Threat Type:IntelliShield: Applied Mitigation Bulletin
IntelliShield ID:87
Version:1
First Published:2000 May 01 16:00 GMT
Last Published:2000 May 01 16:00 GMT
Port: Not available
Urgency:Unlikely Use
Credibility:Highly Credible
Severity:Harassment
 
Version Summary:

The use of instant messaging applications may create attack vectors that allow malicious users to conduct attacks on the systems of users who utilize the clients.? A compromised user system may lead to the compromise of multiple systems on the network.

 

Description
 

Instant messaging applications allow users to exchange messages in near real time. These transactions are normally routed between users via a central server. The use of these applications can create risks to the system and network.? Users can receive links to malicious websites or files containing malicious code, which may lead to a compromise of the system and could compromise additional systems on the network.

The following is a list of the more popular instant messaging services:

Jabber
Sametime
AIM?
Yahoo Messenger
MSN Messenger
Gadu-Gadu
ICQ
IRC

Administrators should review security policies and documents to determine the appropriate use of these applications.


Signatures
 
Cisco Intrusion Prevention System (IPS) 5.1
Signature IDSignature NameReleaseLatest Release Date
11203/0IRC Channel JoinS462003 May 30 
11206/0ICQ Client DNS RequestS1762005 Jun 20 
11207/0AIM Client DNS requestS1762005 Jun 20 
11208/0Yahoo Messenger Client DNS RequestS1762005 Jun 20 
11209/0MSN Messenger Client DNS RequestS1762005 Jun 20 
Cisco Intrusion Prevention System (IPS) 6.0
Signature IDSignature NameReleaseLatest Release Date
5537/0ICQ Client DNS RequestS5912011 Aug 26 
5538/0AIM Client DNS requestS5912011 Aug 26 
5539/0Yahoo Messenger Client DNS RequestS5912011 Aug 26 
5540/0MSN Messenger Client DNS RequestS5912011 Aug 26 
11025/0IRC DCC File TransferS5882011 Aug 09 
11200/0Yahoo Messenger ActivityS5882011 Aug 09 
11201/0MSN Messenger ActivityS5882011 Aug 09 
11202/0AIM / ICQ Messenger ActivityS5882011 Aug 09 
11203/0IRC Channel JoinS462003 May 30 
11203/1IRC Channel JoinS4512009 Nov 25 
11204/0Jabber ActivityS5882011 Aug 09 
11205/0Sametime ActivityS5932011 Sep 07 
11206/0ICQ Client DNS RequestS1762005 Jun 20 
11207/0AIM Client DNS requestS1762005 Jun 20 
11208/0Yahoo Messenger Client DNS RequestS1762005 Jun 20 
11209/0MSN Messenger Client DNS RequestS1762005 Jun 20 
11210/0AIM / ICQ Through HTTP ProxyS3002007 Sep 05 
11210/1AIM / ICQ Through HTTP ProxyS3002007 Sep 05 
11211/0MSN Messenger Through HTTP ProxyS5812011 Jul 12 
11211/1MSN Messenger Through HTTP ProxyS5812011 Jul 12 
11212/0Yahoo Messenger Through HTTP ProxyS5812011 Jul 12 
11213/0AOL IM LoginS5882011 Aug 09 
11214/0AOL IM Message SendS5882011 Aug 09 
11215/0AOL IM Message ReceiveS5882011 Aug 09 
11216/0AOL IM Chat - User JoinS5882011 Aug 09 
11217/0Yahoo Messenger LogonS5882011 Aug 09 
11218/0Yahoo Messenger Send MessageS5882011 Aug 09 
11219/0Yahoo Messenger Receive MessageS5882011 Aug 09 
11221/0Yahoo Messenger Chat Invitation ActivityS5882011 Aug 09 
11222/0MSN LoginS5882011 Aug 09 
11223/0MSN Message SentS5882011 Aug 09 
11224/0MSN Message ReceivedS5882011 Aug 09 
11225/0MSN Chat Invitation SentS5882011 Aug 09 
11226/0MSN Chat Invitation ReceivedS5882011 Aug 09 
11227/0MSN Chat Invitation AcceptedS5882011 Aug 09 
11228/0MSN Chat JoinedS5882011 Aug 09 
11229/0AOL IM Chat - User LeaveS5882011 Aug 09 
11230/0AOL IM Chat - Incoming MessageS5882011 Aug 09 
11231/0AOL IM Chat - Outgoing MessageS5882011 Aug 09 
11232/0AOL IM Chat - Create roomS5882011 Aug 09 
11234/0Jabber LogonS5882011 Aug 09 
11235/0MSN File Transfer Proposal SentS5882011 Aug 09 
11236/0MSN File Transfer Proposal ReceivedS5882011 Aug 09 
11237/0Jabber Chatroom ActivityS5882011 Aug 09 
11238/0MSNFTP File TransferS5882011 Aug 09 
11239/0ICQ Chat Invitation SentS5942011 Sep 13 
11240/0ICQ Chat Invitation ReceivedS5942011 Sep 13 
11241/0ICQ Specific RequestS5942011 Sep 13 
11242/0ICQ File TransferS5942011 Sep 13 
11244/0MSN P2P File TransferS5942011 Sep 13 
11245/0IRC Server ConnectionS6242012 Feb 09 
11245/1IRC Server ConnectionS6242012 Feb 09 
11245/2IRC Server ConnectionS6242012 Feb 09 
11245/3IRC Server ConnectionS3672008 Nov 11 
11246/0AIM File Transfer RequestS5532011 Mar 16 
11247/0AIM File TransferS5532011 Mar 16 
11248/0Gadu-Gadu LoginS5812011 Jul 12 
11249/0Gadu-Gadu IM Message SentS5002010 Jul 13 
11250/0Gadu-Gadu IM Message ReceivedS5002010 Jul 13 
11252/0AIM Express ActivityS5812011 Jul 12 
11252/1AIM Express ActivityS5822011 Jul 14 
27559/0GaduGadu Client ActivityS6302012 Mar 07 
Cisco Small Business IPS
Signature IDSignature NameReleaseLatest Release Date
SBIPS2009-000037/MSN Messenger ActivitySBIPS0000012010 Jan 15 
SBIPS2009-000038/IRC Server ConnectionSBIPS0000012010 Jan 15 
SBIPS2009-000925/MSNFTP File TransferSBIPS0000012010 Jan 15 
SBIPS2009-001204/Yahoo Messenger ActivitySBIPS0000012010 Jan 15 
SBIPS2009-001206/AOL Instant Messenger ActivitySBIPS0000012010 Jan 15 
SBIPS2009-001212/MSN LoginSBIPS0000012010 Jan 15 
SBIPS2009-001213/MSN Message SentSBIPS0000012010 Jan 15 
SBIPS2009-001214/MSN Message ReceivedSBIPS0000012010 Jan 15 
SBIPS2009-001215/MSN Chat Invitation SentSBIPS0000012010 Jan 15 
SBIPS2009-001216/MSN Chat Invitation ReceivedSBIPS0000012010 Jan 15 
SBIPS2009-001217/MSN Chat Invitation AcceptedSBIPS0000012010 Jan 15 
SBIPS2009-001218/MSN Chat JoinedSBIPS0000012010 Jan 15 
SBIPS2009-001219/MSN File Transfer Proposal SentSBIPS0000012010 Jan 15 
SBIPS2009-001220/MSN File Transfer Proposal ReceivedSBIPS0000012010 Jan 15 
SBIPS2009-001221/MSN P2P File TransferSBIPS0000012010 Jan 15 
SBIPS2009-001222/AOL Instant Messenger ActivitySBIPS0000012010 Jan 15 
SBIPS2009-001223/AOL Instant Messenger ActivitySBIPS0000012010 Jan 15 
SBIPS2010-000196/Gadu-Gadu Client ActivitySBIPS0000112011 Jan 21 
 
Alert History
 

This is a Security Activity Bulletin.



Product Sets
 
The security vulnerability applies to the following combinations of products.

Primary Products:
IntelliShieldSecurity Activity Bulletin Original Release Base

Associated Products:
N/A




Alerts and bulletins on the Cisco Security Intelligence Operations Portal are highlighted by analysts in the Cisco Threat Operations Center and represent a subset of the comprehensive content that is available through Cisco Security IntelliShield Alert Manager Service. This customizable threat and vulnerability alert service provides security staff with access to timely, accurate, and credible information about threats and vulnerabilities that may affect their environment.


LEGAL DISCLAIMER
The urgency and severity ratings of this alert are not tailored to individual users; users may value alerts differently based upon their network configurations and circumstances. THE ALERT, AND INFORMATION CONTAINED THEREIN, ARE PROVIDED ON AN "AS IS" BASIS AND DO NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE ALERT, AND INFORMATION CONTAINED THEREIN, OR MATERIALS LINKED FROM THE ALERT, IS AT YOUR OWN RISK. INFORMATION IN THIS ALERT AND ANY RELATED COMMUNICATIONS IS BASED ON OUR KNOWLEDGE AT THE TIME OF PUBLICATION AND IS SUBJECT TO CHANGE WITHOUT NOTICE. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE ALERTS AT ANY TIME.
Powered by  IntelliShield