BID:246

ICQ 99a File Existence Information Leakage Vulnerability

Info

ICQ 99a File Existence Information Leakage Vulnerability

Bugtraq ID:	246
Class:	Design Error
CVE:	CVE-1999-1418
Remote:	Yes
Local:	No
Published:	May 01 1999 12:00AM
Updated:	Jul 11 2009 12:16AM
Credit:	This vulnerability was reported to the BUGTRAQ mailing list by Jan Vogelgesang <[email protected]>.
Vulnerable:	Mirabilis ICQ 99a 2.15 Build #1701 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0

Not Vulnerable:	Mirabilis ICQ 99a 2.21 Build #1800 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0

Exploit / POC

ICQ 99a File Existence Information Leakage Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Solution / Fix

ICQ 99a File Existence Information Leakage Vulnerability

Solution:
Disable the ICQ Webserver or upgrade to ICQ 99a 2.21 Build #1800.

References

ICQ 99a File Existence Information Leakage Vulnerability

References: