Directory traversal in AIM direct conect
Published:		17.04.2002
Source:		BUGTRAQ
SecurityVulns ID:		1936
Type:		remote
Level:		6/10
Description:		During direct connect it's possible to send a file with a name containing "../"

Affected:

AOL : Instant Messenger 4.8

Original document

Noah Johnson, AIM's 'Direct Connection' feature could lead to arbitrary file creation (17.04.2002)

Discuss:

Read or add your comments to this news (0 comments)