By registering with us, you'll be able to discuss, share and private message with other members of our community.

  1. Welcome to the 12ozProphet Forum...
    You are currently logged out and viewing our forum as a guest which only allows limited access to our discussions, photos and other forum features. If you are a 12ozProphet Member please login to get the full experience.

    If you are not a 12ozProphet Member, please take a moment to register to gain full access to our website and all of its features. As a 12ozProphet Member you will be able to post comments, start discussions, communicate privately with other members and access members-only content. Registration is fast, simple and free, so join today and be a part of the largest and longest running Graffiti, Art, Style & Culture forum online.

    Please note, if you are a 12ozProphet Member and are locked out of your account, you can recover your account using the 'lost password' link in the login form. If you no longer have access to the email you registered with, please email us at [email protected] and we'll help you recover your account. Welcome to the 12ozProphet Forum (and don't forget to follow @12ozprophet in Instagram)!

Hole in AIM??

Discussion in 'Channel Zero' started by DITDxCULT, Jan 3, 2002.


    DITDxCULT Senior Member

    Joined: Dec 13, 2001 Messages: 1,192 Likes Received: 0



    RESTON, Virginia (CNN) -- AOL Time Warner's popular AOL Instant Messenger has a security flaw that could enable a hacker to invade a user's computer and wreak havoc on the system, the company and a security group said Wednesday.

    AOL spokesman Andrew Weinstein said there have been no indications that hackers have exploited the flaw, which should be fixed by Thursday or Friday. AOL Time Warner is the parent company of CNN.com

    "This is more of a theoretical issue because we don't believe this has actually occurred," Weinstein said. "We have developed a resolution, and it should be deployed in a day or two."

    He described the fix as a "server-side resolution" that AOL would repair itself, so "users won't have to do anything" to fix the problem.

    The problem has to do with a new feature that allows users to play online games with each other. The security flaw appears only in its most recent Windows version of AIM, 4.7, Weinstein said.

    The group that discovered the flaw says it dates back to at least the 4.3 version. The group, w00w00, is a nonprofit security organization that has members in nine countries, including Russia, the United States and Australia.

    Non-Windows versions are not affected by the problem.

    Until AOL fixes the problem, w00w00 recommends users restrict incoming messages to friends on their "Buddy List." A user can do this by going to "Your Preferences." In the "Privacy" section, click "Allow Only Users on My Buddy List" under "Who Can Contact Me," the security group said.

    Not taking such an action would leave the program vulnerable to a worm or virus similar to Melissa, ILOVEYOU and Code Red, which have caused problems in computers worldwide.

    The flaw is "relatively simple to exploit."

    "The implications of this vulnerability are huge and leave the door wide open for a worm," w00w00 said in a statement on its Web site. "This vulnerability will allow remote penetration of the victim's system without any indication as to who performed the attack. There is no opportunity to refuse the request."

    AIM has more than 100 million users on its various versions.