Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2003-0237

Published: May 27, 2003 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2003-0237
CWEhttps://cwe.mitre.org/data/definitions/NVD-Other.html

The ICQ Features on Demand functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which allows remote attackers to install arbitrary software via a spoofing attack.

Affected Software

Name Vendor Start Version End Version
Icq Mirabilis 99a_2.15build1701 99a_2.15build1701
Icq Mirabilis 99a_2.21build1800 99a_2.21build1800
Icq Mirabilis 2000.0a 2000.0a
Icq Mirabilis 2000.0b_build3278 2000.0b_build3278
Icq Mirabilis 2001a 2001a
Icq Mirabilis 2001b_build3636 2001b_build3636
Icq Mirabilis 2001b_build3638 2001b_build3638
Icq Mirabilis 2001b_build3659 2001b_build3659
Icq Mirabilis 2002a_build3722 2002a_build3722
Icq Mirabilis 2002a_build3727 2002a_build3727
Icq Mirabilis 2003a_build3777 2003a_build3777
Icq Mirabilis 2003a_build3799 2003a_build3799
Icq Mirabilis 2003a_build3800 2003a_build3800

References

Aqua SaaS Plans
The fastest track to get started with Aqua
Start Now
Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2022 Aqua Security Software Ltd.   Privacy Policy | Terms of Use