CVE-2004-2596 Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (exhaustion of connection slots) via a large number of connections from the same IP addr...
MediumCVSS 5.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (exhaustion of connection slots) via a large number of connections from the same IP address.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| id software quake ii server | = 3.20 | No fix listed |
| id software quake ii server | = 3.21 | No fix listed |
References
- 20041027 Multiple Vulnerabilites in Quake II Server mailing-list
- 13013 third-party-advisory vendor-advisory
- secur1ty.net vendor-advisory
- 1011979 vdb-entry
- web.archive.org
- 11551 vdb-entry
- quake-mult-conn-dos(17894) vdb-entry