Directory Traversal Vulnerability in AOL Instant Messenger by AOL
CVE-2002-0591

Currently unrated

Key Information:

Vendor

Aol

Status
Instant Messenger
Vendor
CVE Published:
18 June 2002

What is CVE-2002-0591?

AOL Instant Messenger (AIM) 4.8 beta and earlier versions contain a directory traversal vulnerability in the Direct Connection feature. This flaw allows remote attackers to create arbitrary files and execute commands by manipulating the SRC attribute of an IMG tag. As a result, unauthorized file creation and command execution could occur, potentially compromising the affected system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.iss.net/security_center/static/8870.php
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/4526
vdb-entryx_refsource_BID
http://archives.neohapsis.com/archives/bugtraq/2002-04/02...
mailing-listx_refsource_BUGTRAQ

EPSS Score

11% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.