Description
A certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute shell commands via unknown attack vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Advisories 2
- DSA-760-1 ekg - several Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-4-1 ekg - multiple vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-760 vendor-advisory
- 20050721 Multiple vulnerabilities in libgadu and ekg package mailing-list