Lucene search
HistoryJul 06, 2006 - 8:05 p.m.
CVE-2006-3400
cve-2006-3400
denial of service
remote code execution
quake 3 engine
sof2mp
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
High
0.045 Low
EPSS
Percentile
92.5%
Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to cause a denial of service and possibly execute code by sending a long command from the server.
Affected configurations
Node
id_softwarequake_3_engineMatch1.32b
ORid_softwarequake_3_engineMatch1.32c
ORid_softwarequake_3_engineMatchicculus_812
ORraven_softwaresoldier_of_fortune_2Match1.03
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
High
0.045 Low
EPSS
Percentile
92.5%
Related for CVE-2006-3400