Vulnerabilities > CVE-2004-1230 - Information Disclosure vulnerability in Gadu-Gadu Instant Messenger

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
gadu-gadu

Summary

Gadu-Gadu allows remote attackers to gain sensitive information and read files from the _cache directory of other users via a DCC connection and a CTCP packet that contains a 1 as the type and a 4 as the subtype.

Vulnerable Configurations

Part Description Count
Application
Gadu-Gadu
1