AIM Remote File Transfer/Direct Connection Vulnerability
Source: Security Protocols
A security vulnerability in AIM allows attackers to steal file transfers destined for other users, or intrude into a direct connection initiated between two AIM users. This would allow an attacker to get a hold of sensitive information traversing between two end users, and use this information to impersonate one of the end users.
When AIM gets a connection request or tries to connect to someone else it acts as a server, a program that would rapidly try and connect to the target IP (every 450 milliseconds) on port 4443 (Direct Connection) and 5190 (File Transfer) would be able to grab any file waiting for transfer.
