PT-2004-3422 · Gadu Gadu · Gadu-Gadu

Bartosz Kwitkowski · Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2530

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Gadu-Gadu (affected versions not specified)

Description The issue allows remote attackers to spoof the file extension on transmitted files by using a filename with a large number of spaces followed by the real extension. This filename manipulation is not fully displayed in the dialog box, potentially leading to visual truncation and spoofing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2004-2530

Produtos afetados

Gadu-Gadu

Referências · 7

• 🔥 http://securityfocus.com/bid/11017 · Exploit
• 🔥 http://seclists.org/lists/vuln-dev/2004/Aug/0007.html · Exploit
• 🔥 http://osvdb.org/9162 · Exploit
• 🔥 https://exploit-db.com/exploits/24404 · Exploit
• 🔥 http://securitytracker.com/id?1011037 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17105 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2530 · Nota de Segurança