Unscored CVE-2004-1231 EUVD-2004-1228GHSA-9fj8-h362-589r

Directory traversal vulnerability in Gadu-Gadu allows remote attackers to read arbitrary files via .. (dot dot) sequences in a DCC connecti…

Published Dec 15, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in Gadu-Gadu allows remote attackers to read arbitrary files via .. (dot dot) sequences in a DCC connection with a CTCP packet that contains a 1 as the type and a 4 as the subtype.

References

20041213 Gadu-Gadu several vulnerabilities mailing-list
gadu-gadu-dcc-ctcp-obtain-files(18461) vdb-entry
http://www.man.poznan.pl/~security/gg-adv.txt