CVE-2004-1231: Gadu-Gadu Instant Messenger

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Gadu-Gadu allows remote attackers to read arbitrary files via .. (dot dot) sequences in a DCC connection with a CTCP packet that contains a 1 as the type and a 4 as the subtype.

Affected products

• Gadu-Gadu Gadu-Gadu Instant Messenger: any version

Published 2005-01-10. Last modified 2026-06-16.