CVE-1999-1289

CVE-1999-1289 describes an information leakage vulnerability in ICQ 98 beta on Windows NT, where the client's internal IP address is inadvertently disclosed in TCP data segments instead of the public address, potentially revealing network configurations. This vulnerability carries a high severity CVSS score of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P), indicating it can be exploited remotely with low complexity to impact confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this decades-old vulnerability.