EUVD-2005-2775

Malware in sbrugna...

CVE-2005-2774

CVE-2005-2774 affects Lithium II mod 1.24 for Quake 2. The vulnerability is a format string flaw in the nickname handling that can cause a server denial of service and may allow arbitrary code execution. Exploitation details are not provided in the available documents; no specific exploit vectors...

CVE-2005-2774: Undefined Security Weakness

Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the nickname...

quake2-bof-DoS.txt

Date: Wed, 20 Jan 1999 11:32:53 -0900 From: Leif Sawyer To: [email protected] Subject: Quake 2 Server Crash As the admin of a number of quake servers, I get a lot of grief when the servers stop responding. So imagine my shock today when I found this in the log files: this occurrs multiple time...