CVE-1999-1418 — MEDIUM (5.0)

Vulnerability Description

ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the server by comparing server responses when a file exists ("404 Forbidden") versus when a file does not exist ("404 not found").

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Mirabilis	Icq Web Front	All versions

References

http://www.securityfocus.com/archive/1/13508PatchVendor Advisory
http://www.securityfocus.com/bid/246
http://www.securityfocus.com/archive/1/13508PatchVendor Advisory
http://www.securityfocus.com/bid/246

FAQ

What is CVE-1999-1418?

CVE-1999-1418 is a vulnerability with a CVSS score of 5.0 (MEDIUM). ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the server by comparing server responses when a file exists ("40...

How severe is CVE-1999-1418?

CVE-1999-1418 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-1999-1418?

Check the references section above for vendor advisories and patch information. Affected products include: Mirabilis Icq Web Front.