CVE-2000-1093

Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.atstake.com/research/advisories/2000/a121200-1.txt	Exploit Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5732
http://www.atstake.com/research/advisories/2000/a121200-1.txt	Exploit Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5732

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:aol:instant_messenger:2.0_n:::::::*
	cpe:2.3:a:aol:instant_messenger:2.5.1366:::::::*
	cpe:2.3:a:aol:instant_messenger:2.5.1598:::::::*
	cpe:2.3:a:aol:instant_messenger:3.0.1470:::::::*
	cpe:2.3:a:aol:instant_messenger:3.0_n:::::::*
	cpe:2.3:a:aol:instant_messenger:3.5.1635:::::::*
	cpe:2.3:a:aol:instant_messenger:3.5.1670:::::::*
	cpe:2.3:a:aol:instant_messenger:3.5.1808:::::::*
	cpe:2.3:a:aol:instant_messenger:3.5.1856:::::::*
	cpe:2.3:a:aol:instant_messenger:4.0:::::::*
	cpe:2.3:a:aol:instant_messenger:4.1.2010:::::::*
	cpe:2.3:a:aol:instant_messenger:4.2.1193:::::::*

History

20 Nov 2024, 23:33

Type	Values Removed	Values Added
References	~~() http://www.atstake.com/research/advisories/2000/a121200-1.txt - Exploit, Patch, Vendor Advisory~~	() http://www.atstake.com/research/advisories/2000/a121200-1.txt - Exploit, Patch, Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/5732 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/5732 -

Information

Published : 2001-01-09 05:00

Updated : 2024-11-20 23:33

NVD link : CVE-2000-1093

Mitre link : CVE-2000-1093

CVE.ORG link : CVE-2000-1093

JSON object : View

Products Affected

aol

instant_messenger

CWE

NVD-CWE-Other

{"id": "CVE-2000-1093", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2001-01-09T05:00:00.000", "references": [{"url": "http://www.atstake.com/research/advisories/2000/a121200-1.txt", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5732", "source": "cve@mitre.org"}, {"url": "http://www.atstake.com/research/advisories/2000/a121200-1.txt", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5732", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long \"goim\" command."}], "lastModified": "2024-11-20T23:33:59.507", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:aol:instant_messenger:2.0_n:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED10DFD8-2532-466D-8EBB-F05081F2935D"}, {"criteria": "cpe:2.3:a:aol:instant_messenger:2.5.1366:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D371BDC-9E31-4EB1-88E9-82C2976086E1"}, {"criteria": "cpe:2.3:a:aol:instant_messenger:2.5.1598:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64B46D19-9103-40C5-A6A4-D5BE8DF8276E"}, {"criteria": "cpe:2.3:a:aol:instant_messenger:3.0.1470:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D47319C5-1E96-4AEB-ABA9-638DFF22BD56"}, {"criteria": "cpe:2.3:a:aol:instant_messenger:3.0_n:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "483C0045-4C10-4120-AB89-C36467993E25"}, {"criteria": "cpe:2.3:a:aol:instant_messenger:3.5.1635:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7577D890-E06A-477C-80BE-48075FB16437"}, {"criteria": "cpe:2.3:a:aol:instant_messenger:3.5.1670:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34B6D42F-9FD9-4E0D-BB59-8E65E817889C"}, {"criteria": "cpe:2.3:a:aol:instant_messenger:3.5.1808:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C2B7D7B-DB48-458B-9CA5-813782BA600D"}, {"criteria": "cpe:2.3:a:aol:instant_messenger:3.5.1856:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF19BBC6-C4F2-4636-8650-E178FFD6BF4C"}, {"criteria": "cpe:2.3:a:aol:instant_messenger:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E00F0805-8C73-43B1-87AC-744434046E59"}, {"criteria": "cpe:2.3:a:aol:instant_messenger:4.1.2010:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B2707D6-D5EC-4A22-B5E1-2A34913CB3FB"}, {"criteria": "cpe:2.3:a:aol:instant_messenger:4.2.1193:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "172E406F-108C-4D9A-80AB-78CDF134C4A8"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}