PT-2004-3422 · Gadu Gadu · Gadu-Gadu

Bartosz Kwitkowski · Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2530

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Gadu-Gadu (affected versions not specified)

Description The issue allows remote attackers to spoof the file extension on transmitted files by using a filename with a large number of spaces followed by the real extension. This filename manipulation is not fully displayed in the dialog box, potentially leading to visual truncation and spoofing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-2530

Affected Products

Gadu-Gadu

References · 7

• 🔥 http://securityfocus.com/bid/11017 · Exploit
• 🔥 http://seclists.org/lists/vuln-dev/2004/Aug/0007.html · Exploit
• 🔥 http://osvdb.org/9162 · Exploit
• 🔥 https://exploit-db.com/exploits/24404 · Exploit
• 🔥 http://securitytracker.com/id?1011037 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2530 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17105 · Note