low2.6Public exploit code
CVE-2002-1813
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the program in th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AOL Instant Messenger 4.8.2790 - Local File Execution2002-10-22 · remote · windows · Verified
Impact
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the program in the href attribute of a link.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aol | Instant Messenger | Versions 4.7.2480, 4.8.2616, 4.8.2646, 5.0.2938 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0319.html
- http://www.iss.net/security_center/static/10441.php
- http://www.securityfocus.com/bid/6027
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0319.html
- http://www.iss.net/security_center/static/10441.php
- http://www.securityfocus.com/bid/6027