CVE Catalog

CVE-2000-0552

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.12%

62th percentile - higher than 62% of all known CVEs

Summary

The ICQwebmail client for ICQ 2000A creates a world-readable temporary file during login and does not delete it, allowing local users to obtain sensitive information.

Risk Assessment

Local users may gain access to sensitive data, posing a risk of information leakage within the organization.

Recommendation

It is recommended to delete the temporary file after login and restrict its access to authorized users only.

Original NVD description (English source)

ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS