OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
AOL Instant Messanger - Buddy Icon Warn Exploit

From: Josh Camacho (sfocusceromus.com)
Date: Fri Dec 19 2003 - 09:24:31 CST


AOL Instant Messanger - Buddy Icon Warn Exploit

"Discovered by Robbie Saunders, it allows you to warn somebody if they have a buddy icon, but they don't have to send you an Instant Message. This has to be done using a program though, it just sends the user an IM, but request's their buddy icon at the end of it, taking their rate limit away allowing you to warn them or just kill their rate limit all together."

Several programs have already implemented this exploit resulting in a quick attack to raise your warning level to 100% and crippling your communication through aol instant messanger.

Im sorry at this time I do not have the specifics, recommended action is of course to remove your buddy icon until this issue is resolved.