CVE-1999-1418
MediumExploitation Probability (EPSS)
Elevated risk67th percentile - higher than 67% of all known CVEs
Summary
ICQ99 web server build 1701 with 'Active Homepage' enabled allows remote attackers to determine the existence of files on the server by comparing server responses when a file exists ('404 Forbidden') versus when a file does not exist ('404 not found').
Risk Assessment
Attackers can exploit this vulnerability to gather information about the file structure on the server, potentially leading to further attacks or security breaches.
Recommendation
It is recommended to disable the 'Active Homepage' feature or implement appropriate security measures to prevent attackers from accessing file information.
Original NVD description (English source)
ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the server by comparing server responses when a file exists ("404 Forbidden") versus when a file does not exist ("404 not found").