CVE-2000-0383: Medium severity AOL Instant Messenger vulnerability
The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable AIM's file transfer feature to prevent the remote recipient from seeing the physical path of transferred files.
AOL Instant Messenger (AIM) file transfer component file transfer = disabled - Compensating control
Avoid sending files over AIM; restrict or block AIM file transfers at network or endpoint controls and use a different secure file transfer method to prevent disclosure of local filesystem paths.
- Operational
Notify users and administrators that AIM's file transfer reveals physical file paths and instruct them not to send files that could expose sensitive filesystem information until a vendor-supplied fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0383?
CVE-2000-0383 is classified as a medium severity vulnerability due to the potential exposure of sensitive file paths.
How do I fix CVE-2000-0383?
Fixing CVE-2000-0383 involves upgrading to a later version of AOL Instant Messenger that addresses this vulnerability.
What impact does CVE-2000-0383 have on users?
CVE-2000-0383 can lead to unauthorized disclosure of file paths to remote recipients during file transfers.
Which versions of AOL Instant Messenger are affected by CVE-2000-0383?
AOL Instant Messenger version 4.0 is the only version affected by CVE-2000-0383.
Is CVE-2000-0383 exploitable?
Yes, CVE-2000-0383 is exploitable as it allows attackers to gain insights into file structures via revealed paths.