Vulnerability Development mailing list archives

Re: AIM bug or feature

From: Ali () WIBBLENESS DEMON CO UK (Alistair Orchard)
Date: Wed, 10 May 2000 05:22:51 +0100


yeah .. if you put in a HTML code higher than 255 in ASCII then you will crash older versions of AOL AIM, IIRC
Versions 3.something downwards
&#772;  will kill the program .. don't know if it's exploitable or not ..

A. Orchard
IT Support.
(Not enough sleep tonite)

  ----- Original Message ----- 
  From: jeff D 
  To: VULN-DEV () SECURITYFOCUS COM 
  Sent: Wednesday, May 10, 2000 4:56 AM
  Subject: AIM bug or feature

  I was experimenting with AIM's direct connection feature and i would like to know if it is a feature or a bug that 
once you are connected(like DCC chat on IRC) that you can logoff of AIM and still be able to talk to that person and 
send images.  Also if it is a bug, does anybody know of any vulnerabilities or anything besides being able to get a 
persons IP & hostmask. 

  Jeff D

Current thread:

Re: CGI source being exposed using "~", (continued)
- - Re: CGI source being exposed using "~" Adam Clarke (May 08)
- Re: CGI source being exposed using Labu Labi (May 08)
- Re: CGI source being exposed using "~" Jeremy Gaddis (May 07)
- Re: CGI source being exposed using "~" Irwan Shahrin Ismail (May 07)
- Re: CGI source being exposed using "~" George Capehart (May 08)
- Re: CGI source being exposed using "~" Brian McKinney (May 08)
  - Re: CGI source being exposed using "~" Joe (May 09)
  - Alternative ways of IP spoofing? Max.P (May 09)
    - Re: Alternative ways of IP spoofing? Justin Randall (May 09)
    - AIM bug or feature jeff D (May 09)
    - Re: AIM bug or feature Alistair Orchard (May 09)
    - Punishment Blue Boar (May 09)
    - Re: AIM bug or feature Justin Lintz (May 10)
    - Re: AIM bug or feature White Vampire (May 10)
    - really fast data Ogrodnek, Larry (May 10)
    - Re: Alternative ways of IP spoofing? Doru Petrescu (May 10)
    - AIM & VPN jeff D (May 10)
    - Re: AIM & VPN Jeremy Gaddis (May 10)
    - Re: AIM & VPN Bluefish (May 11)
    - Re: AIM & VPN Matthew S. Hallacy (May 12)
    - Norton Internet Security 2000 Jon Alabot (May 10)

(Thread continues...)