Bugtraq mailing list archives

Re: AIM addendum


From: Matt Conover <shok () dataforce net>
Date: Wed, 2 Jan 2002 23:00:40 +0300 (MSK)

The temporary solution you provide would only protect you so long as all 
the buddies on your list were not compromised.  As soon as one buddy is 
compromised, then you are vulnerable *through* that buddy.  Or am I not 
clearly understanding this exploit?

Yes, which is why in the original advisory we recommended AIM filter be
installed. This will block the attack from anyone. So only allowing your
buddies to contact you in addition to installing AIM filter will keep you
secure until a new version of AIM comes out. 


Current thread: