OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Paul Schmehl (paulsutdallas.edu)
Date: Thu Jan 03 2002 - 15:10:54 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    This appears to be a quite cynical attempt at "fixing" a problem. The fact
    is that all the AIM clients still contain the buffer overflow revealed in
    Matt's advisory. All that is required now is for some enterprising soul to
    construct an exploit that locates listening clients and exploits them
    directly, rather than through the AOL servers.

    How long do you think that will take? 5 hours?

    --On Thursday, January 03, 2002 1:41 PM -0800 Mark Coleman
    <mcolemanuniontown.com> wrote:

    > AIM fixed? Can anyone confirm?
    >
    > http://www.msnbc.com/modules/exports/ct_email.asp?/news/680950.asp

    Paul Schmehl (paulsutdallas.edu)
    Supervisor of Support Services
    The University of Texas at Dallas
    AVIEN Founding Member