CVE-2003-0237 | BDVDB-2026-5409 Detail

Description#

The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0051.html
http://www.coresecurity.com/common/showdoc.php?idx=315&idxseccion=10
https://exchange.xforce.ibmcloud.com/vulnerabilities/11944
http://marc.info/?l=bugtraq&m=105216842131995&w=2
http://www.securityfocus.com/bid/7464

Exploit#

No public exploit known

History#

Version 12003-05-07Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.