Full Disclosure mailing list archives
Re: ICQ 6 protocol bug?
From: Valdis.Kletnieks () vt edu
Date: Sat, 14 Feb 2009 16:49:05 -0500
On Sat, 14 Feb 2009 23:26:48 +0200, James Matthews said:
ICQ is known to have a few remote bugs. I use meebo.com instead of a client due to these issues.
At which point you're probably trading known bugs for unknown bugs. ;) Of course, this is a battle the user can't win. The other option is to toss the proprietary ICQ client and use some other open-source client like Pidgin - at which point you're trading known ICQ bugs for unknown Pidgin bugs. At that point, your best bet is to consider 2 things: 1) What client am I most likely to see actual attacks against? 2) What client am I the most worried about attacks? (Note the two don't have to be the same - widespread ICQ attacks may be more common, but maybe you worry more about getting hit with a Pidgin attack because it possibly means you're being targeted....)
Attachment:
_bin
Description:
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- ICQ 6 protocol bug? Darren Reed (Feb 13)
- Re: ICQ 6 protocol bug? Leon Juranic (Feb 14)
- Re: ICQ 6 protocol bug? James Matthews (Feb 14)
- Re: ICQ 6 protocol bug? Valdis . Kletnieks (Feb 14)
- Re: ICQ 6 protocol bug? sr. (Feb 14)
- Re: ICQ 6 protocol bug? Darren Reed (Feb 18)
- Re: ICQ 6 protocol bug? James Matthews (Feb 14)
- Re: ICQ 6 protocol bug? Leon Juranic (Feb 14)
- <Possible follow-ups>
- Re: ICQ 6 protocol bug? bobby . mugabe (Feb 15)
- Re: ICQ 6 protocol bug? Morning Wood (Feb 15)