CVE-2004-2595 Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a download com...
MediumCVSS 5.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a download command with a full pathname for a directory in the argument, which causes the server to crash when it cannot read data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| id software quake ii server linux | = 3.20 | No fix listed |
| id software quake ii server linux | = 3.21 | No fix listed |
References
- 20041027 Multiple Vulnerabilites in Quake II Server mailing-list
- 13013 third-party-advisory vendor-advisory
- secur1ty.net vendor-advisory
- 1011979 vdb-entry
- web.archive.org
- 11184 vdb-entry
- 11551 vdb-entry
- quake-path-dos(17893) vdb-entry