PT-2000-1487 · Icq · Icq 2000A+1

Published 2000-06-06 · Updated 2024-02-08 · CVE-2000-0552

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ICQ 2000A

Description The issue allows local users to obtain sensitive information due to the creation of a world-readable temporary file during login, which is not deleted. This occurs in the ICQwebmail client for ICQ 2000A.

Recommendations For ICQ 2000A, consider implementing a secure method for handling temporary files, such as properly deleting them after use, to prevent sensitive information disclosure. As a temporary workaround, restrict access to the temporary files created during the login process to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-459

Related Identifiers

CVE-2000-0552

Affected Products

Icq 2000A

Icqwebmail

References · 6

• 🔥 http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0237.html · Exploit
• 🔥 https://exploit-db.com/exploits/19993 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0552 · Security Note
• http://securityfocus.com/bid/1307 · Vendor Advisory
• https://t.me/cvenotify/70651 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/4607 · Note