ICQ Pro 2003a - 'ca1-icq.asm' Password Bypass

; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ; ------------------------------------------------------------------------- ; ; 07/02/2003 - ca1-icq.asm ; ICQ Password Bypass exploit. ; written by Caua Moura Prado aka ca1 ; ; This exploit allows you to login to ICQ server using a...

ICQ Pro 2003a Password Bypass exploit (ca1-icq.asm)

No description provided by source. ; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ; ------------------------------------------------------------------------- ; ; 07/02/2003 - ca1-icq.asm ; ICQ Password Bypass exploit. ; written by Caua Moura Prado aka ca1 ; ; This exploit allows...

ICQ Pro 2003a - ca1-icq.asm Password Bypass

ICQ Pro 2003a - ca1-icq.asm Password Bypass ; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ; ------------------------------------------------------------------------- ; ; 07/02/2003 - ca1-icq.asm ; ICQ Password Bypass exploit. ; written by Caua Moura Prado aka ca1 ; ; This explo...

ICQ Pro 2003a Password Bypass exploit (ca1-icq.asm)

Exploit for unknown platform in category local exploits =================================================== ICQ Pro 2003a Password Bypass exploit ca1-icq.asm =================================================== ; ; CUT HERE - CUTE HERE - ca1-icq.asm - CUT HERE - CUT HERE BOF ;...

ICQ 2003a Password Bypass

Software: ICQ 2003a Threat: Login password can be bypassed locally I have found a vulnerability in ICQ Pro 2003a that allows anyone to connect to ICQ server using any account registered locally regardless the 'save password' option is checked or not. High level security password is also bypassed!...

CVE-2003-0235

Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command...

CVE-2003-0239

CVE-2003-0239 concerns the GIF89a parsing/rendering library in Mirabilis ICQ Pro 2003a (icqateimg32.dll). Affected: ICQ Pro 2003a and earlier. Issue: input validation error when parsing GIF headers that lack a Global Color Table (GCT) or Local Color Table (LCT) after an Image Descriptor, enabling...

CVE-2003-0235

Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command...

CVE-2003-0236

CVE-2003-0236 concerns Mirabilis ICQ Pro 2003a’s integrated POP3 client (POP3.dll COM object). The vulnerability is a 16‑bit signed overflow in the Subject and Date headers (Subject/Date fields) of e‑mail messages, allowing an attacker to craft headers that can execute arbitrary commands on a vul...

CVE-2003-0238

CVE-2003-0238 impacts Mirabilis ICQ Pro 2003a and earlier. The flaw resides in ICQ’s Message Session HTML rendering library used by the ADS/advertising component. By spoofing the ADS server and sending malformed HTML, an attacker can trigger a denial-of-service condition, consuming CPU and freezi...

CVE-2003-0237: Undefined Security Weakness

The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack...

CVE-2003-0235: Undefined Security Weakness

Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command...

CVE-2003-0239: Undefined Security Weakness

icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF89a headers that do not contain a GCT Global Color Table or an LCT Local Color Table after an Image Descriptor...

CVE-2003-0236: Undefined Security Weakness

Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the 1 Subject or 2 Date headers...

CVE-2003-0238: Undefined Security Weakness

The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service CPU consumption by spoofing the address of an ADS server and sending HTML with a -1 width in a table tag...