2.6 CVE-2002-1813

Exploit Patch
 

Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the program in the href attribute of a link.
https://nvd.nist.gov/vuln/detail/CVE-2002-1813

Categories

CWE-NVD-Other

References

BID Exploit

6027
Exploit

BUGTRAQ Exploit

XF Patch


 

CPE

cpe start end
Configuration 1
cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.8.2616:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:4.8.2646:*:*:*:*:*:*:*
cpe:2.3:a:aol:instant_messenger:5.0.2938:*:*:*:*:*:*:*


REMEDIATION


Patch

Url
aim-url-execute-files(10441)


EXPLOITS


Exploit-db.com

id description date
21958 AOL Instant Messenger 4.8.2790 - Local File Execution 2002-10-22 00:00:00

Other (github, ...)

Url
6027
20021021 AIM 4.8.2790 remote file execution vulnerability


CAPEC


Common Attack Pattern Enumerations and Classifications

id description severity
No entry


MITRE