CVE-2007-3350

CVE-2007-3350 affects AOL Instant Messenger (AIM) 6.1.32.1 on Windows XP. The vulnerability allows remote attackers to cause a denial of service (application hang) by sending a flood of spoofed SIP INVITE requests. The public records note the issue as a DoS vector in SIP INVITE handling, with no ...

Directory traversal

Directory traversal vulnerability in AOL Instant Messenger AIM 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted remote attackers to write files to arbitrary locations via a .. dot dot in a filename in a file transfer operation...

CVE-2007-1904

Directory traversal vulnerability in AOL Instant Messenger AIM 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted remote attackers to write files to arbitrary locations via a .. dot dot in a filename in a file transfer operation...

CVE-2007-1904

CVE-2007-1904 describes a directory-traversal vulnerability in AOL Instant Messenger (AIM) ≤ 5.9 and ICQ ≤ 5.1 (likely earlier) that allows user-assisted remote attackers to write files to arbitrary locations by supplying a filename containing .. in a file transfer operation. The core issue is im...

CVE-2007-1904

Directory traversal vulnerability in AOL Instant Messenger AIM 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted remote attackers to write files to arbitrary locations via a .. dot dot in a filename in a file transfer operation...

CVE-2007-0021

Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service null pointer dereference and application crash and possibly execute arbitrary code via format string specifiers in an aim:// URI...

MOAB-20-01-2007: Apple iChat aim:// URL Handler Format String Vulnerability

Summary Description from the Wikipedia article: AOL Instant Messenger AIM, ICQ, .Mac and Jabber client for Mac OS X. Using a Jabber-like protocol and Bonjour for user discovery, it also allows for LAN communication. iChat's AIM support is fully endorsed by AOL, and uses their official...

Apple iChat 3.1.6 v441 aim:// URL Handler Format String Exploit PoC

Exploit for macOS platform in category dos / poc =================================================================== Apple iChat 3.1.6 v441 aim:// URL Handler Format String Exploit PoC =================================================================== MOAB-20-01-2007 function boom var str = '';...

ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability

ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-036.html October 31, 2006 -- CVE ID: CVE-2006-5478 -- Affected Vendor: Novell -- Affected Products: Netmail 3.5.2 Novell eDirectory 8.8.1 -- TippingPointTM IPS Customer...

AIM Triton 1.0.4 CSeq Buffer Overflow

This module exploits a buffer overflow in AOL's AIM Triton 1.0.4. By sending an overly long CSeq value, a remote attacker could overflow a buffer and execute arbitrary code on the system with the privileges of the affected application. This module requires Metasploit:...

Debian DSA-1049-1 : ethereal - several vulnerabilities

Gerald Combs reported several vulnerabilities in ethereal, a popular network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1932 The OID printing routine is susceptible to an off-by-one error. - CVE-2006-1933 The UMA and BER...

AIM Triton 1.0.4 (SipXtapi) Remote Buffer Overflow Exploit (PoC)

Exploit for unknown platform in category remote exploits ================================================================ AIM Triton 1.0.4 SipXtapi Remote Buffer Overflow Exploit PoC ================================================================ !/usr/bin/perl p0c Tested on Windows XP SP2 with...

AIM Triton 1.0.4 - SipXtapi Remote Buffer Overflow

AIM Triton 1.0.4 - SipXtapi Remote Buffer Overflow !/usr/bin/perl p0c Tested on Windows XP SP2 with triton 1.0.4 c0rrupt -at- f34r -dot- us This exploits the sipxtapi vuln in triton which was patched.. sometime ago.. The exploit sends a specially crafted udp packet to the triton client which lead...

sipXtapi Cseq header buffer overflow

Added: 07/17/2006 CVE: CVE-2006-3524 BID: 18906 OSVDB: 27122 Background The Session Initiation Protocol SIP is a signaling protocol for a variety of uses, including instant messanging and Voice over Internet Protocol. sipXtapi is a client library for SIP-based user agents. It is included in Pingt...

sipXtapi Cseq header buffer overflow

Added: 07/17/2006 CVE: CVE-2006-3524 BID: 18906 OSVDB: 27122 Background The Session Initiation Protocol SIP is a signaling protocol for a variety of uses, including instant messanging and Voice over Internet Protocol. sipXtapi is a client library for SIP-based user agents. It is included in Pingt...

CVE-2006-3007

Multiple cross-site scripting XSS vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the DJ fields 1 Description, 2 URL, 3 Genre, 4 AIM, and 5 ICQ...

CVE-2006-3007

Multiple cross-site scripting XSS vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the DJ fields 1 Description, 2 URL, 3 Genre, 4 AIM, and 5 ICQ...

FreeBSD : gaim -- AIM/ICQ non-UTF-8 filename crash (09db2844-0b21-11da-bc08-0001020eed82)

The GAIM team reports : A remote user could cause Gaim to crash on some systems by sending the Gaim user a file whose filename contains certain invalid characters. It is unknown what combination of systems are affected, but it is suspected that Windows users and systems with older versions of GTK...

FreeBSD : gaim -- AIM/ICQ away message buffer overflow (6d1761d2-0b23-11da-bc08-0001020eed82)

The GAIM team reports : A remote AIM or ICQ user can cause a buffer overflow in Gaim by setting an away message containing many AIM substitution strings such as %t or %n. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

Fedora Core 5 : ethereal-0.99.0-fc5.1 (2006-456)

Many security vulnerabilities have been fixed since the previous release. - The H.248 dissector could crash. Versions affected: 0.10.14. CVE: CVE-2006-1937 - The UMA dissector could go into an infinite loop. Versions affected: 0.10.12 - 0.10.14. CVE: CVE-2006-1933 - The X.509if dissector could...