icq99a.DoS.txt

Date: Mon, 29 Mar 1999 01:07:18 -0500 From: Ronald A. Jarrell To: [email protected] Subject: icq DOS / possible "stupid user" vulnerability. Ok, I was a bit surprised when, in playing with the new ICQ99a build 1700 v2.13 client which I believe is the first publicly distributed one of the 99...

icq99.web.server.txt

Date: Mon, 5 Apr 1999 23:50:56 +0200 From: Jan Vogelgesang To: [email protected] Subject: security hole in ICQ-Webserver Hi, Some days ago i've read a message here in Bugtraq from Ronald A. Jarell about a vulnerability in the ICQ-Webserver . I tried to reproduce this vulnerability with my...

icq.webserver.exploits.txt

ICQ Homepage Exploit By Shadow51 Ever wondered why there is a little house beside the name of some people? That doesn't mean they are at home, it means they have the ICQ-Webserver running. The idiots who made it left huge bugs in it, like you can close their ICQ remotely, and even download their...

icq99.passwd.txt

Date: Sun, 25 Apr 1999 22:46:02 +0400 From: delta To: [email protected] Subject: ICQ 99 Password Hi! I find that icq 99 stored password in open text in file ICQ\NewDB\uin.dat try open it with note pad , hit search and enter your password . Password always placed in the end of line "iUserSound"...

mirc-hidden-files.txt

Date: Sat, 2 Jan 1999 06:15:04 -0500 From: Locke Nash Cole To: [email protected] Subject: Re: Win32 ICQ 98a flaw You can also do this in the popular mIRC IRC Client, althou it has no "Open" option so there is a less chance of the person running it, however in explorer "mypic..bmp .exe" Kinda...

licq-DoS.txt

Date: Fri, 04 Dec 1998 03:28:57 -0800 From: Spikeman To: [email protected], [email protected] Subject: Licq It has been reported to myself that "Zman" has told the coder of Licq Graham Roff about I do not know if this is true or not. But I thought I should say something . For those...

icq-hidden-files.txt

Date: Fri, 1 Jan 1999 14:20:34 +1100 From: Justin Clift To: [email protected] Subject: Win32 ICQ 98a flaw Hello everyone, A while ago I found a flaw in ICQ which I believe to be fairly serious and asked whom to notify. Thanks for everyone's assistance in this. :- I notified Mirabilis and they...

CVE-1999-0474

The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory...

CVE-1999-1440

Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is...

CVE-1999-1289

ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address e.g. through NAT, which provides remote attackers with potentially sensitive information about the client or the internal network configuration...

: Multiples vulnerabilities in ICQ Toolbar 1.3 for Internet Explorer

Advisory ID Internal CORE-2006-0322 Advisory Information Advisory ID : CORE-2006-0322 Bugtraq ID : 19900 CVE Name : CVE-2006-4660 / CVE-2006-4661 Title : Multiples vulnerabilities in ICQ Toolbar 1.3 for Internet Explorer Class : Access Validation Error/Design Error, Input validation error Remotel...