Lucene search
+L

Mirabilis ICQ 2000.0 A - Mailclient Temporary Link

🗓️ 06 Jun 2000 00:00:00Reported by Gert FokkemaType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 29 Views

ICQmail client creates a temporary link in the default directory, exposing user accounts after logout.

Related
Code
ReporterTitlePublishedViews
Family
cve
CVE
CVE-2000-0552
13 Oct 200004:00
cve
cvelist
Cvelist
CVE-2000-0552
13 Oct 200004:00
cvelist
nessus
Tenable Nessus
ICQ < 2003b Multiple Vulnerabilities
5 May 200300:00
nessus
nvd
NVD
CVE-2000-0552
6 Jun 200004:00
nvd
openvas
OpenVAS
ICQ is installed
26 Mar 200600:00
openvas
openvas
OpenVAS
ICQ is installed
26 Mar 200600:00
openvas
ptsecurity
Positive Technologies
PT-2000-1487 · Icq · Icqwebmail +1
6 Jun 200000:00
ptsecurity
source: https://www.securityfocus.com/bid/1307/info

While using ICQmailclient, the user creates a temporary internet link created in a default temporary directory, which remains even after the user signs out or closes ICQ. This link may be re-opened by another user, thus giving them full access to the ICQmail webaccount.

The temporary link can be found in the default temp file (eg. c:\temp) and appears as:
http://cf.icq.com/cgi-bin/icqmail/write.pl5?uname=username&pwd=12345678

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Jul 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 22.1
CVSS 3.15.5
EPSS0.01116
29