CVE-2004-1230: Gadu-Gadu Instant Messenger

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Gadu-Gadu allows remote attackers to gain sensitive information and read files from the _cache directory of other users via a DCC connection and a CTCP packet that contains a 1 as the type and a 4 as the subtype.

Affected products

• Gadu-Gadu Gadu-Gadu Instant Messenger: any version

Published 2005-01-10. Last modified 2026-06-16.