Mirabilis ICQ 2000A Mailclient Temporary Link Vulnerability

Bugtraq ID:	1307
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Jun 06 2000 12:00AM
Updated:	Jun 06 2000 12:00AM
Credit:	This exploit was submitted by Gert Fokkema on June 6, 2000.
Vulnerable:	Mirabilis ICQ 2000.0 A - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0
Not Vulnerable:

Mirabilis ICQ 2000A Mailclient Temporary Link Vulnerability

While using ICQmailclient, the user creates a temporary internet link created in a default temporary directory, which remains even after the user signs out or closes ICQ. This link may be re-opened by another user, thus giving them full access to the ICQmail webaccount.

Mirabilis ICQ 2000A Mailclient Temporary Link Vulnerability

The temporary link can be found in the default temp file (eg. c:\temp) and appears as:
http://cf.icq.com/cgi-bin/icqmail/write.pl5?uname=username&pwd=12345678

Mirabilis ICQ 2000A Mailclient Temporary Link Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Mirabilis ICQ 2000A Mailclient Temporary Link Vulnerability

References:

• ICQ Homepage (Mirabilis)
  
• ICQmailclient Homepage (Mirabilis)