Lucene search

[email protected]CVE-2004-2594

HistoryNov 29, 2005 - 2:00 a.m.

CVE-2004-2594

2005-11-2902:00:00

[email protected]

web.nvd.nist.gov

cve-2004-2594

quake ii

windows

path traversal

remote file read

vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

84.9%

JSON

Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a “/” in a pathname argument, as demonstrated by “download /server.cfg”.

Affected configurations

NVD

Node

id_softwarequake_ii_server_windowsMatch3.20

id_softwarequake_ii_server_windowsMatch3.21

CPENameOperatorVersion
id_software:quake_ii_server_windowsid software quake ii server windowseq3.20
id_software:quake_ii_server_windowsid software quake ii server windowseq3.21

CPE	Name	Operator	Version
id_software:quake_ii_server_windows	id software quake ii server windows	eq	3.20
id_software:quake_ii_server_windows	id software quake ii server windows	eq	3.21

References

archives.neohapsis.com/archives/bugtraq/2004-10/0299.html

secunia.com/advisories/13013

secur1ty.net/advisories/001

securitytracker.com/id?1011979

web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/

www.osvdb.org/11183

www.securityfocus.com/bid/11551

exchange.xforce.ibmcloud.com/vulnerabilities/17892

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

84.9%

JSON

Related for CVE-2004-2594

nvd1 cvelist1 openvas2