CVE Catalog
CVE-1999-0474
MediumExploitation Probability (EPSS)
High risk1.90%
77th percentile - higher than 77% of all known CVEs
Summary
The ICQ Webserver allows remote attackers to access arbitrary files outside of the user's personal directory using the '..' sequence.
Risk Assessment
Attackers may gain access to sensitive data, potentially leading to privacy breaches and security compromises.
Recommendation
It is recommended to update the ICQ server to the latest version and implement appropriate security measures to restrict access to system files.
Original NVD description (English source)
The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.