Vulnerability Development mailing list archives

Re: ICQ 2000


From: griffinb () HOTKEY NET AU (Brad Griffin)
Date: Wed, 27 Oct 1999 01:55:05 +1000


From:                   Sean Burford <slide () TELLURIAN COM AU>
Subject:                Re: ICQ 2000

It could also be a simple way of collecting the UINs of all who attempt
to install the program.

There are two interesting strings in this Delphi program, possibly the
ICQ user IDs are not so random.  Maybe one was for testing, or was
randomly picked during coding.

The strings are (Lines broken for readability (note the to: line)):

from=ICQ
&fromemail=ICQ
&subject=ICQ2000
&body=Try the newest ICQ v.2000 now!!!  Available at:
http://download-icq2000.hypermart.net/
&to=52249528
&Send=Send+Message

from=ICQ
&fromemail=ICQ
&subject=ICQ2000
&body=Try the newest ICQ v.2000 now!!! Available at:
http://download-icq2000.hypermart.net/
&to=
&Send=Send+Message

Info on the first ICQ number is at
http://wwp.icq.com/52249528#info

Sean

Brad Griffin
Infotech undergrad & e-mail addict
CQU Rockhampton, Australia
Useful links:
http://www.pgpi.org/
http://spamcop.net/
http://www.avp.ru/


Current thread: