(PVS) Signatures - Tenable Network Security

AOL Instant Messenger Active File Transfer Hijacking
PVS ID: 1250 FAMILY: Internet Messengers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote client passes network data in an insecure manner\n\nThe remote
host is running AOL Instant Messenger (AIM). In certain versions of AIM it is possible for
a remote attacker to intercept data sent by the AIM client.
Solution: Upgrade to the latest version of AOL Instant Messenger.
CVE-2002-0592
AOL Instant Messenger IMG Tag Arbitrary Command Execution
PVS ID: 1251 FAMILY: Internet Messengers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote client might allow an attacker to execute arbitrary
commands\n\nThe remote host is running AOL Instant Messenger (AIM). In
versions of AIM prior to and including 4.7 a remote attacker can create arbitrary
files on the client's machine by sending a specially crafted message during a
direct connection between the client and the attacker. In addition to being able to
overwrite important files or create arbitrary files on the users system, this
vulnerability may allow the attacker to execute arbitrary commands.
Solution: Upgrade to the latest version of AOL Instant Messenger.
CVE-2002-0591
AOL Instant Messenger Multiple DoS
PVS ID: 1252 FAMILY: Internet Messengers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to several denial of service attacks\n\nThe
remote host is running AOL Instant Messenger (AIM). Versions prior to and including 4.7
of AIM contain multiple buffer overflows that may be exploited when AIM tries to process
exceptionally long comment strings in chat invite messages, long filenames (game names,
buddy list names...), large amounts of font types in a message, or large Buddy Icons.
Exploitation of these vulnerabilities can lock up or crash a victim's AIM client leading to a
denial of service attack.
Solution: Upgrade to the latest version of AOL Instant Messenger
CVE-2001-1421
AOL Instant Messenger <
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 1253 FAMILY: Internet Messengers RISK: HIGH NESSUS ID:Not Available
Family Internet Services 319