[email protected]CVE-2004-1958

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-1958

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-1958

directory traversal

unreal engine

umod file

remote attack

7.6 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.011 Low

EPSS

Percentile

84.2%

JSON

Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via … (dot dot) sequences in a UMOD (Unreal MOD) file.

CPENameOperatorVersion
epic_games:unreal_engineepic games unreal engineeq436
epic_games:unreal_tournament_2003epic games unreal tournament 2003eq2199_macos
epic_games:unreal_tournament_2003epic games unreal tournament 2003eq2225_macos
epic_games:unreal_tournamentepic games unreal tournamenteq451b
epic_games:unreal_tournament_2003epic games unreal tournament 2003eq2199_win32
epic_games:unreal_engineepic games unreal engineeq433
epic_games:unreal_tournament_2003epic games unreal tournament 2003eq2225_win32

CPE	Name	Operator	Version
epic_games:unreal_engine	epic games unreal engine	eq	436
epic_games:unreal_tournament_2003	epic games unreal tournament 2003	eq	2199_macos
epic_games:unreal_tournament_2003	epic games unreal tournament 2003	eq	2225_macos
epic_games:unreal_tournament	epic games unreal tournament	eq	451b
epic_games:unreal_tournament_2003	epic games unreal tournament 2003	eq	2199_win32
epic_games:unreal_engine	epic games unreal engine	eq	433
epic_games:unreal_tournament_2003	epic games unreal tournament 2003	eq	2225_win32

References

aluigi.altervista.org/adv/umod-adv.txt

marc.info/?l=bugtraq&m=108267310519459&w=2

www.securityfocus.com/bid/10196

exchange.xforce.ibmcloud.com/vulnerabilities/15942

7.6 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.011 Low

EPSS

Percentile

84.2%

JSON

Related for CVE-2004-1958

cvelist1