ru.unix.bsd

 
 - RU.UNIX.BSD ------------------------------------------------------------------
 From : Vladimir Podgorny                    2:5020/400     11 Apr 2002  18:51:22
 To : Andrew Khlebutin
 Subject : Re: icq&security
 -------------------------------------------------------------------------------- 
 

 Andrew Khlebutin <andrey@hm.perm.ru> wrote:
 
 http://www.cert.org/advisories/CA-2002-02.html
 
 CERT Advisory CA-2002-02 Buffer Overflow in AOL ICQ
 
 Original release date: January 24, 2002
 
 ...
 Systems Affected                                                                
                                                                                 
      * AOL Mirabilis ICQ Versions 2001A and prior                               
      * Voice  Video  &  Games  plugin  installed  with  AOL Mirabilis ICQ       
        Versions 2001B Beta v5.18 Build #3659 and prior                          
                                                                                 
 Overview                                                                        
                                                                                 
    There is a remotely exploitable buffer overflow in ICQ. Attackers that       
    are able to exploit the vulnerability may be able to execute arbitrary       
    code  with  the  privileges  of  the  victim  user.  Full  details are       
    discussed  in  VU#570167.  An exploit is known to exist, but we do not       
    believe  it  has been distributed in the wild. We have not seen active       
    scanning  for  this vulnerability, nor have we received any reports of       
    this vulnerability being exploited.
 ...
 
 За два с половиной месяца эксплоит вполне себе мог появиться...
 
 > 
 > -- 
 > Заранее благодарен,
 > Андрей Хлебутин
 > 
 
 -- 
 VP992-RIPE
 --- ifmail v.2.15dev5
  * Origin: Adamant ISP news server (2:5020/400)
 
 

Вернуться к списку тем, сортированных по: возрастание даты  уменьшение даты  тема  автор 

Тема:    Автор:    Дата:    icq&security   Andrew Khlebutin   11 Apr 2002 14:39:23   Re: icq&security   Vladimir Podgorny   11 Apr 2002 18:51:22