CVE-2003-0365

ICQLite 2003a creates the ICQ Lite directory with an ACE for "Full Control" privileges for Interactive Users, which allows local users to gain privileges as other users by replacing the executables with malicious programs.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2003-06-16

Last modified

2024-08-08

Affected products

• Icqlite (Icq Inc)

References

• http://marc.info/?l=bugtraq&m=105427404625027&w=2