• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

AOL Instant Messenger Away Message Remote Buffer Overflow Vulnerability

Proof of concept code has been published. John Bissell A.K.A. HighT1mes has also released an exploit designed to leverage this issue.

An exploit has been released as part of the MetaSploit Framework 2.3.

• /data/vulnerabilities/exploits/mandragore-aolim.c
• /data/vulnerabilities/exploits/aolInstantMessengerMessageBOExp.c
• /data/vulnerabilities/exploits/aolInstantMessengerMessageBOExp2.c
• /data/vulnerabilities/exploits/aim_goaway.pm