CVE-2002-0591
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows...
CVE-2002-0591 is a medium vulnerability (CVSS 5.0) in Aol Instant Messenger, published June 11, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.6%, the 96th percentile. No source names a fixed version.
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.
- Record
CVE-2002-0591- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.
- Record
CVE-2002-0591- Updated
- 2026-11-02
EUVDEUVD-2002-0586 No score
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.
- Record
EUVD-2002-0586- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3x72-wc87-c63c No score
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows...
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.
- Record
GHSA-3x72-wc87-c63c- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | AOL Instant Messenger 4.x - Arbitrary File Creation | 2002-04-17 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |