Lucene search

[email protected]CVE-2003-0237

HistoryMay 27, 2003 - 4:00 a.m.

CVE-2003-0237

2003-05-2704:00:00

[email protected]

web.nvd.nist.gov

icq

pro

2003a

software

upgrade

authenticity

remote attackers

arbitrary software

spoofing attack

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

5.6

Confidence

High

EPSS

0.012

Percentile

85.4%

JSON

The “ICQ Features on Demand” functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.

Affected configurations

NVD

Node

mirabilisicqMatch99a_2.15build1701

mirabilisicqMatch99a_2.21build1800

mirabilisicqMatch2000.0a

mirabilisicqMatch2000.0b_build3278

mirabilisicqMatch2001a

mirabilisicqMatch2001b_build3636

mirabilisicqMatch2001b_build3638

mirabilisicqMatch2001b_build3659

mirabilisicqMatch2002a_build3722

mirabilisicqMatch2002a_build3727

mirabilisicqMatch2003a_build3777

mirabilisicqMatch2003a_build3799

mirabilisicqMatch2003a_build3800

VendorProductVersionCPE
mirabilisicq99a+2.21build1800cpe:/a:mirabilis:icq:99a+2.21build1800:::
mirabilisicq2003a+build3800cpe:/a:mirabilis:icq:2003a+build3800:::
mirabilisicq2001acpe:/a:mirabilis:icq:2001a:::
mirabilisicq2000.0b+build3278cpe:/a:mirabilis:icq:2000.0b+build3278:::
mirabilisicq2001b+build3659cpe:/a:mirabilis:icq:2001b+build3659:::
mirabilisicq99a+2.15build1701cpe:/a:mirabilis:icq:99a+2.15build1701:::
mirabilisicq2003a+build3799cpe:/a:mirabilis:icq:2003a+build3799:::
mirabilisicq2003a+build3777cpe:/a:mirabilis:icq:2003a+build3777:::
mirabilisicq2001b+build3638cpe:/a:mirabilis:icq:2001b+build3638:::
mirabilisicq2001b+build3636cpe:/a:mirabilis:icq:2001b+build3636:::

Vendor	Product	Version	CPE
mirabilis	icq	99a+2.21build1800	cpe:/a:mirabilis:icq:99a+2.21build1800:::
mirabilis	icq	2003a+build3800	cpe:/a:mirabilis:icq:2003a+build3800:::
mirabilis	icq	2001a	cpe:/a:mirabilis:icq:2001a:::
mirabilis	icq	2000.0b+build3278	cpe:/a:mirabilis:icq:2000.0b+build3278:::
mirabilis	icq	2001b+build3659	cpe:/a:mirabilis:icq:2001b+build3659:::
mirabilis	icq	99a+2.15build1701	cpe:/a:mirabilis:icq:99a+2.15build1701:::
mirabilis	icq	2003a+build3799	cpe:/a:mirabilis:icq:2003a+build3799:::
mirabilis	icq	2003a+build3777	cpe:/a:mirabilis:icq:2003a+build3777:::
mirabilis	icq	2001b+build3638	cpe:/a:mirabilis:icq:2001b+build3638:::
mirabilis	icq	2001b+build3636	cpe:/a:mirabilis:icq:2001b+build3636:::