Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
From: austin naremore (austintheatticspace.com)
Date: Thu Jan 03 2002 - 15:56:48 CST
it was fixed this morning
AOL returns a nice message too:
Error: message to <screenname here> bounced (Busted SNAC payload)
> AIM fixed? Can anyone confirm?
> Mark C.
> ----- Original Message -----
> From: Matt Conover <shokdataforce.net>
> To: Paul Schmehl <paulsutdallas.edu>
> Cc: <bugtraqsecurityfocus.com>
> Sent: Wednesday, January 02, 2002 12:00 PM
> Subject: Re: AIM addendum
> > > The temporary solution you provide would only protect you so long
> > > the buddies on your list were not compromised. As soon as one
> > > compromised, then you are vulnerable *through* that buddy. Or am
> > > clearly understanding this exploit?
> > Yes, which is why in the original advisory we recommended AIM
> > installed. This will block the attack from anyone. So only allowing
> > buddies to contact you in addition to installing AIM filter will
> > secure until a new version of AIM comes out.