PT-2000-1498 · Icq · Icq

Published 2000-05-29 · Updated 2008-09-10 · CVE-2000-0564

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ICQ versions 2000a, 99b

Description The issue affects the guestbook CGI program in the ICQ Web Front service, allowing remote attackers to cause a denial of service. This is achieved by sending a URL with a long name parameter.

Recommendations For ICQ version 2000a, avoid using the guestbook CGI program until a fix is available. For ICQ version 99b, restrict access to the guestbook CGI program to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2000-0564

Affected Products

Icq

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2000-0564 · Security Note
• http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0218.html · Vendor Advisory