ICQ remote buffer overflow vulnerability

This is very similar to the AIM overflow recently discovered. ICQ protocol uses the same TLV 2711 packet and there is a similar weakness in the parsing of the packet. The details of this vulnerability will not be released until a further time when a patch has been implemented, probably. ICQ2000...

CVE-1999-1342

ICQ ActiveList Server allows remote attackers to cause a denial of service crash via malformed packets to the server's UDP port...

CVE-1999-1440

CVE-1999-1440 affects Win32 ICQ 98a 1.30 and possibly other versions. The vulnerability arises because long filenames are not fully displayed, which could allow an attacker to send an executable file with a long name containing so many spaces that the .exe extension is not visible, potentially mi...

CVE-1999-1289

ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g., via NAT), potentially exposing sensitive information about the client or internal network configuration. The description does not specify affected vers...

CVE-1999-1289

ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address e.g. through NAT, which provides remote attackers with potentially sensitive information about the client or the internal network configuration...

CVE-1999-1342

Technical details for CVE-1999-1342 are not publicly available in the provided documents. Monitor for updates.

CVE-1999-1440

Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is...

CVE-1999-1418

ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the server by comparing server responses when a file exists "404 Forbidden" versus when a file does not exist "404 not found"...

CVE-1999-1418

CVE-1999-1418 affects ICQ99 ICQ web server build 1701 with “Active Homepage” enabled. The vulnerability allows remote attackers to infer the existence of files on the server by comparing responses: a “404 Forbidden” when a file exists vs “404 not found” when it does not. The provided documents do...

Hexyn / Securax Advisory #22 - ICQ Forced Auto-Add Users

Hexyn / Securax Advisory 22 - ICQ Forced Auto-Add Users Topic: ICQ Forced Auto-Add Users Announced: 2001-08-17 Affects: ICQ 200x up to 2001a Alpha DISCLAIMER: THE ENTIRE ADVISORY HAS BEEN BASED UPON TRIAL AND ERROR RESULTS. THEREFORE WE CANNOT ENSURE YOU THE INFORMATION BELOW IS 100 CORRECT. THIS...

CVE-2001-1305

ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's contact list via a URL to a web page with a Content-Type of application/x-icq, which is processed by Internet Explorer...

CVE-2001-0367

Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a large number of % characters...

CVE-2001-0367

The vulnerability CVE-2001-0367 affects Mirabilis ICQ WebFront Plug-in for ICQ2000b (Build 3278). A remote attacker can cause a denial of service by sending HTTP URL requests containing a large number of percent characters. The issue impacts availability (PARTIAL) with a CVSS v2 base score of 5.0...

ICQ protocol vulnerabilities

It's possible to send message from any UIN...

ICQ to ICQ Protocol vurnerable, send messages and receive from any ICQ UIN

TITLE: Send messages and receive from any ICQ UIN PLATFORM: All CREDIT: MelcoSoft CONTACT: [email protected] REMOTE: Yes LOCAL: Yes VULNERABLE: Almost all ICQ Clients Client ICQ to ICQ protocol vurnerable for details view source files... Do you want send messages and receive from any ICQ UIN ?!...

DoS против licq

Определенный тип пакетов в порт слушаемый icq...

CVE-2000-1078

ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character...

CVE-2000-1078

ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character...

CVE-2000-1078

CVE-2000-1078 affects the ICQ Web Front HTTPd. A remote attacker can cause a denial of service by requesting a URL that contains a "?" character. The CVE is corroborated by NVD: ICQ Web Front HTTPd denial of service via a URL with a question mark. Nessus mentions a specific DoS payload involving ...

CVE-2000-0552

CVE-2000-0552 affects the ICQwebmail client for ICQ 2000A. The vulnerability arises because a temporary file created during login is world-readable and not deleted, enabling local users to access sensitive information. Documents confirm the affected software and the insecure temp-file handling; r...