security flaw

The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service assert error via unknown attack vectors...

CVE-2004-0505

CVE-2004-0505 affects Ethereal (Wireshark) with the AIM dissector. The advisory notes that Ethereal versions prior to the fixed release (e.g., 0.10.x up to 0.10.3) are vulnerable and can trigger an assertion error leading to a denial of service. The OpenVAS/Gentoo/GNU advisories corroborate a vul...

PT-2004-1619 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal version 0.10.3 Description: The issue allows remote attackers to cause a denial of service via unknown attack vectors in the AIM dissector. Recommendations: For Ethereal version 0.10.3, at the moment, there is no information about a...

CVE-2004-0505: Undefined Security Weakness

The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service assert error via unknown attack vectors...

CVE-2004-0279

AIM Sniff aimSniff.pl 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log...

CVE-2004-0279: Undefined Security Weakness

AIM Sniff aimSniff.pl 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log...

PT-2003-2448 · Aol · Aol Instant Messenger

Name of the Vulnerable Software and Affected Versions: AOL Instant Messenger AIM version 5.2.3292 Description: The issue allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name. This is a result of a buffer overflow. Recommendations: For AOL Instant...

CVE-2002-0785

AOL Instant Messenger (AIM) is affected by CVE-2002-0785: remote attackers can cause a crash (DoS) by sending an AddBuddy link where the ScreenName parameter contains a very long list of comma-separated values, potentially triggering a buffer overflow. This description reflects the vulnerability ...

CVE-2002-1485

The AIM component of Trillian 0.73 and 0.74 allows remote attackers to cause a denial of service crash via certain strings such as "P O C"...

CVE-2002-1485

The CVE-2002-1485 entry concerns the AIM component of Trillian versions 0.73 and 0.74. A remote attacker can cause a denial of service (crash) by sending certain strings (e.g., "P > O

CVE-2002-1485: Undefined Security Weakness

The AIM component of Trillian 0.73 and 0.74 allows remote attackers to cause a denial of service crash via certain strings such as "P O C"...

Trillian Remote DoS Attack - AIM

Advisory Url: http://www.computersecuritynow.com/modules.php?op=modload&name=News&file=article&sid=817&mode=thread&order=0&thold=0 ComputerSecurityNow Advisory Sep 23 2002 Trillian Remote DoS Attack - AIM Spikeman - spikeman at computersecuritynow dot com http://www.computersecuritynow.com/ Thank...

CVE-2002-0592

CVE-2002-0592 affects AOL Instant Messenger (AIM). The vulnerability allows remote attackers to steal files being transferred to other clients by connecting to AIM’s Direct Connection port 4443 or file transfer port 5190 before the intended user. The available sources describe this as a scheme to...

CVE-2002-0591

CVE-2002-0591 refers to a directory-traversal vulnerability in AOL Instant Messenger (AIM) up to and including version 4.8 beta and earlier . The flaw allows a remote attacker to create arbitrary files and execute commands via a Direct Connection using an IMG tag with a SRC attribute that specifi...

AOL Instant Messenger vulnerable to denial-of-service attack via buddy list transfers

Overview America Online's Instant Messenger AIM contains a remotely exploitable buffer overflow vulnerability. Description AOL Instant Messenger is a program for communicating with other users over the Internet and is widely used. During a buddy list transfer, a buffer overflow may occur. It has...

CVE-2002-0591: Undefined Security Weakness

Directory traversal vulnerability in AOL Instant Messenger AIM 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename...

File send interception in AIM

Durig file trasmitio icomig connection is accepted without additioal user or IP validation...

AIM Remote File Transfer/Direct Connection Vulnerability

AIM Remote File Transfer/Direct Connection Vulnerability I Discovered this vulnerability while I was port scanning my brotherApril 15th, 2002, he just happened to send me a file and the port scan connected and received the file instead of me... The next dayApril 16th, 2002 I made a program to...

Directory traversal in AIM direct conect

During direct connect it's possible to send a file with a name containing "../"...

AIM's 'Direct Connection' feature could lead to arbitrary file creation

AIM's 'Direct Connection' feature could lead to arbitrary file creation ---------------------------------------------------------------------- - Author: Noah Johnson [email protected] Affected versions: All versions of AOL Instant Messenger up to 4.8 beta on all platforms of Windows as far as I...