CVE-2006-3324

The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine ioquake3 before revision 804 allows remote attackers to overwrite arbitrary files in the quake3 directory fshomepath cvar via a long string of filenames, as contained in the neededpaks buffer...

CVE-2006-3325

The CVE affects the client component (cl_parse.c) of the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier. The flaw allows remote servers to send a sequence of cvar names/values that can overwrite write-protected client cvars, such as cl_allowdownload (A...

CVE-2006-3324

The CVE-2006-3324 entry describes a remote arbitrary-file overwrite vulnerability in the id3 Quake 3 Engine and ioquake3 (ioquake3) before revision 804, exploitable via the Automatic Downloading option by sending a long string of filenames contained in the neededpaks buffer. The underlying issue ...