Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

ICQ Web Front can be crashed by crafted URL

CVE-2000-1078 · published 25 years ago
Summary

The ICQ Web Front web server can stop responding if it receives a request that contains a "?" character in the URL. An attacker from anywhere on the internet could use this to make the service unavailable to legitimate users. Apply any available updates from the vendor and consider filtering or blocking such malformed requests at the network edge.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
mirabilis icq_web_front windows_9x
cpe:2.3:a:mirabilis:icq_web_front:windows_9x:*:*:*:*:*:*:*
Original advisory text
ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.
ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
5% chance of attack within 30 days
Timeline
Published11 Dec 2000
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2000-1078 · NVD
Track software like this
Free during beta