| Vulnerability Name: | CVE-2004-2595 (CCN-17893) | ||||||||
| Assigned: | 2004-10-27 | ||||||||
| Published: | 2004-10-27 | ||||||||
| Updated: | 2017-07-11 | ||||||||
| Summary: | Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a download command with a full pathname for a directory in the argument, which causes the server to crash when it cannot read data. | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||
| References: | Source: BUGTRAQ Type: UNKNOWN 20041027 Multiple Vulnerabilites in Quake II Server Source: CCN Type: BugTraq Mailing List, Wed Oct 27 2004 - 07:18:06 CDT Multiple Vulnerabilites in Quake II Server Source: MITRE Type: CNA CVE-2004-2595 Source: CCN Type: SA13013 Quake2 Engine Multiple Vulnerabilities Source: SECUNIA Type: Vendor Advisory 13013 Source: MISC Type: Vendor Advisory http://secur1ty.net/advisories/001 Source: CCN Type: r1ch.net Security Advisory, 2004-10-27 Multiple Vulnerabilites in Quake II Server Source: CCN Type: SECTRACK ID: 1011979 Quake II Has Multiple Bugs That Let Remote Users Obtain Information, Deny Service, and Possibly Execute Arbitrary Code Source: SECTRACK Type: UNKNOWN 1011979 Source: CONFIRM Type: UNKNOWN http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/ Source: CCN Type: Quake Web site Quake III: Gold Source: OSVDB Type: UNKNOWN 11184 Source: CCN Type: OSVDB ID: 11184 Quake 2 Server Linux Auto Download DoS Source: CCN Type: r1ch.net Web site R1Q2 - R1CHs Hacked Quake II Client/Server Source: BID Type: UNKNOWN 11551 Source: CCN Type: BID-11551 ID Software Quake II Server Multiple Remote Vulnerabilities Source: XF Type: UNKNOWN quake-path-dos(17893) Source: XF Type: UNKNOWN quake-path-dos(17893) | ||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||
| BACK | |||||||||