CVE-2006-1102
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.5 Medium
AI Score
Confidence
High
0.167 Low
EPSS
Percentile
96.1%
Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client exit) by forcing the server to change to a map (ogz) file whose name contains “…” sequences and has a certain length that prevents the addition of the “.ogz” extension.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| sauerbraten:cube | sauerbraten cube | eq | 2005-08-09 |
| sauerbraten:sauerbraten | sauerbraten | eq | 2006-02-28 |
References
aluigi.altervista.org/adv/evilcube-adv.txt
secunia.com/advisories/19110
secunia.com/advisories/19111
secunia.com/advisories/19199
securityreason.com/securityalert/548
www.gentoo.org/security/en/glsa/glsa-200603-10.xml
www.securityfocus.com/archive/1/426865/100/0/threaded
www.securityfocus.com/archive/1/426867/100/0/threaded
www.securityfocus.com/bid/16986
www.vupen.com/english/advisories/2006/0847
www.vupen.com/english/advisories/2006/0848
exchange.xforce.ibmcloud.com/vulnerabilities/25086
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.5 Medium
AI Score
Confidence
High
0.167 Low
EPSS
Percentile
96.1%