CVE-2000-0552

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2000-0552

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

2.1 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

I

CQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information.

References
Link Resource
http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0237.html Broken Link Exploit Patch Vendor Advisory
http://www.securityfocus.com/bid/1307 Broken Link Patch Third Party Advisory VDB Entry Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4607 Third Party Advisory VDB Entry
http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0237.html Broken Link Exploit Patch Vendor Advisory
http://www.securityfocus.com/bid/1307 Broken Link Patch Third Party Advisory VDB Entry Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4607 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:icq:icq:2000a:*:*:*:*:*:*:*
History

20 Nov 2024, 23:32

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0237.html - Broken Link, Exploit, Patch, Vendor Advisory () http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0237.html - Broken Link, Exploit, Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/1307 - Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory () http://www.securityfocus.com/bid/1307 - Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/4607 - Third Party Advisory, VDB Entry () https://exchange.xforce.ibmcloud.com/vulnerabilities/4607 - Third Party Advisory, VDB Entry
Information

Published : 2000-06-06 04:00

Updated : 2025-04-03 01:03

NVD link : CVE-2000-0552

Mitre link : CVE-2000-0552

CVE.ORG link : CVE-2000-0552

JSON object : View

Products Affected

icq

CWE
CWE-459

Incomplete Cleanup