VULNERABILITY INTELLIGENCE

CVE-1999-1289

CVSS score7.5 HIGH
EPSS probability1.35%
CISA KEVNot currently listed
Published1998-11-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g. through NAT), which provides remote attackers with potentially sensitive information about the client or the internal network configuration.

Primary references