CVE-2002-0591: Medium severity AOL Instant Messenger vulnerability
Published Jun 11, 2002
·Updated
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.
Affected Software
9 affected components
AOL Instant Messenger=4.0
AOL Instant Messenger=4.1
AOL Instant Messenger=4.2
AOL Instant Messenger=4.3
AOL Instant Messenger=4.4
AOL Instant Messenger=4.5
AOL Instant Messenger=4.6
AOL Instant Messenger=4.7
AOL Instant Messenger=4.8_beta
Remediation
Patch Available
Event History
Jun 11, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0591?
CVE-2002-0591 is considered a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2002-0591?
To fix CVE-2002-0591, upgrade to a version of AOL Instant Messenger later than 4.8 beta.
3
What software is affected by CVE-2002-0591?
CVE-2002-0591 affects AOL Instant Messenger versions 4.0 through 4.8 beta.
4
Can CVE-2002-0591 allow arbitrary file creation?
Yes, CVE-2002-0591 allows remote attackers to create arbitrary files on the vulnerable system.
5
What type of attack is associated with CVE-2002-0591?
CVE-2002-0591 is associated with a directory traversal attack via a Direct Connection in AIM.