CVE-2002-0770 Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "...
MediumCVSS 5.0
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "$" macros, which causes the server to expand the macros and leak the information, as demonstrated using "say $rcon_password."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| id software quake 2i server | = 3.20 | No fix listed |
| id software quake 2i server | = 3.21 | No fix listed |
References
- 20020514 Remote quake 2 3.2x server cvar leak mailing-list
- quake2-unexpanded-var-disclosure(9095) vdb-entry vendor-advisory
- VU#970915 third-party-advisory us-government-resource
- 11187 vdb-entry
- www.quakesrc.org vendor-advisory
- 4744 patch vdb-entry vendor-advisory