Major ICQ security hole (1998)

43 points22 comments3 days ago
compass_copium

>When a password of 9 or more characters is sent, their buffer is over-run, and it allows you to log in.

Man, computers used to be fun

show comments
SillyUsername

So this is how my low numbered account was stolen back in the day - thanks for sharing.

show comments
waltbosz

AOL Instant Messenger had several remote code execution exploits. They worked just by sending an IM to someone. You could also crash their computer remotely, or maybe it would just create their client.

Also their stored password encryption algorithm was easily reversible.

show comments
mannycalavera42

Tooooooooooooooooooooooooot! (startup jingle, good mems)

taspeotis

Rewrite it in Rust

show comments
chuckhend

Uh oh!

show comments