CVE-2004-2530 - Vulnerability Details - OpenCVE

Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files via a filename with a large number of spaces followed by the real extension, which is not displayed in the dialog box.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity High

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Gadu-gadu	Gadu-gadu Instant Messenger

Configuration 1 [-]

cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://seclists.org/lists/vuln-dev/2004/Aug/0007.html
http://securitytracker.com/id?1011037
http://www.osvdb.org/9162
http://www.securityfocus.com/bid/11017
https://exchange.xforce.ibmcloud.com/vulnerabilities/17105

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-10-25T04:00:00

Updated: 2024-08-08T01:29:13.979Z

Reserved: 2005-10-25T00:00:00

Link: CVE-2004-2530

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2004-12-31T05:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2004-2530

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2004-08-21T00:00:00", "descriptions": [{"lang": "en", "value": "Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files via a filename with a large number of spaces followed by the real extension, which is not displayed in the dialog box."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "gadu-gadu-file-ext-spoof(17105)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17105"}, {"name": "20040821 GADU-GADU Instant messanger - long file name", "tags": ["mailing-list", "x_refsource_VULN-DEV"], "url": "http://seclists.org/lists/vuln-dev/2004/Aug/0007.html"}, {"name": "9162", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/9162"}, {"name": "1011037", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1011037"}, {"name": "11017", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/11017"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2004-2530", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files via a filename with a large number of spaces followed by the real extension, which is not displayed in the dialog box."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "gadu-gadu-file-ext-spoof(17105)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17105"}, {"name": "20040821 GADU-GADU Instant messanger - long file name", "refsource": "VULN-DEV", "url": "http://seclists.org/lists/vuln-dev/2004/Aug/0007.html"}, {"name": "9162", "refsource": "OSVDB", "url": "http://www.osvdb.org/9162"}, {"name": "1011037", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1011037"}, {"name": "11017", "refsource": "BID", "url": "http://www.securityfocus.com/bid/11017"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T01:29:13.979Z"}, "title": "CVE Program Container", "references": [{"name": "gadu-gadu-file-ext-spoof(17105)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17105"}, {"name": "20040821 GADU-GADU Instant messanger - long file name", "tags": ["mailing-list", "x_refsource_VULN-DEV", "x_transferred"], "url": "http://seclists.org/lists/vuln-dev/2004/Aug/0007.html"}, {"name": "9162", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/9162"}, {"name": "1011037", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1011037"}, {"name": "11017", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/11017"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2004-2530", "datePublished": "2005-10-25T04:00:00", "dateReserved": "2005-10-25T00:00:00", "dateUpdated": "2024-08-08T01:29:13.979Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:*:*:*:*:*:*:*:*", "matchCriteriaId": "EB080D26-16DA-46A3-A446-9793E0D4537A", "vulnerable": false}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files via a filename with a large number of spaces followed by the real extension, which is not displayed in the dialog box."}], "id": "CVE-2004-2530", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.6, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": true}]}, "published": "2004-12-31T05:00:00.000", "references": [{"source": "[email protected]", "tags": ["Exploit"], "url": "http://seclists.org/lists/vuln-dev/2004/Aug/0007.html"}, {"source": "[email protected]", "tags": ["Exploit"], "url": "http://securitytracker.com/id?1011037"}, {"source": "[email protected]", "tags": ["Exploit"], "url": "http://www.osvdb.org/9162"}, {"source": "[email protected]", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/11017"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17105"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://seclists.org/lists/vuln-dev/2004/Aug/0007.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://securitytracker.com/id?1011037"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.osvdb.org/9162"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/11017"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17105"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "[email protected]", "type": "Primary"}]}