Man-in-the-Middle Vulnerability in AOL Instant Messenger
CVE-2012-5816

Currently unrated

Key Information:

Vendor

Aol

Status
Aim
Vendor
CVE Published:
4 November 2012

What is CVE-2012-5816?

AOL Instant Messenger 1.0.1.2 fails to properly verify that the server hostname matches the domain name specified in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate. This vulnerability allows attackers to conduct man-in-the-middle attacks by presenting a valid certificate from an arbitrary server, potentially leading to the interception and manipulation of user communications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/79935
vdb-entryx_refsource_XF
http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.