35 matches found
[SECURITY] Fedora 15 Update: quake3-1.36-11.svn2102.fc15
This package contains the enhanced opensource ioquake3 version of the Quake 3 Arena engine. This engine can be used to play a number of games based on th is engine, below is an incomplete list: OpenArena, Free, Open Source Quake3 like game, recommended! packagename: openarena Urban Terror, gratis...
Fedora 15 : openarena-0.8.5-4.fc15 / quake3-1.36-11.svn2102.fc15 (2011-9774)
Update to 1.36 svn snapshot r2102 - This fixes 2 security issues where a malicious server could execute arbitrary code on connecting clients rhbz725951 : - CVE-2011-1412: Execute arbitrary shell commands on connecting clients - CVE-2011-2764: Arbitrary code execution when native-code DLLs are...
CVE-2011-2764
The FSCheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dangerous file extensions, which allows remote attackers to execute arbitrary code...
Quake 3 Shell Injection / Code Execution
Hello, Quake 3 is a popular online first person shooter developed by IDsoftware 1 that has been released in 1999 and is still widely played. After the release of the source code under the GPL, the ioQuake3 project 2 was started that is dedicated to maintaining the existing codebase. Several game...
quake3-master-getservers NSE Script
Queries Quake3-style master servers for game servers many games other than Quake 3 use this same protocol. Script Arguments quake3-master-getservers.outputlimit If set, limits the amount of hosts returned by the script. All discovered hosts are still stored in the registry for other scripts to us...
Fedora 12 : quake3-1.36-7.svn1783.fc12 (2010-8558)
Wed May 12 2010 Xavier Lamien - 1.36-7.svn1783 - Update release to svn revision r1783. - Remove botlib-strcpy-abuse patch added upstream. - Thu Jan 21 2010 Hans de Goede 1.36-6 - Update fix autodlrc mirror URL's 557252 - Fri Dec 18 2009 Hans de Goede 1.36-5 - Modify Urban Terror launch script to...
Fedora 13 : quake3-1.36-7.svn1783.fc13 (2010-8622)
Wed May 12 2010 Xavier Lamien - 1.36-7.svn1783 - Update release to svn revision r1783. - Remove botlib-strcpy-abuse patch added upstream. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora Update for quake3 FEDORA-2010-8558
Check for the Version of quake3 OpenVAS Vulnerability Test Fedora Update for quake3 FEDORA-2010-8558 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for quake3 FEDORA-2010-8558
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
[SECURITY] Fedora 12 Update: quake3-1.36-7.svn1783.fc12
This package contains the enhanced opensource ioquake3 version of the Quake 3 Arena engine. This engine can be used to play a number of games based on th is engine, below is an incomplete list: OpenArena, Free, Open Source Quake3 like game, recommended! packagename: openarena Urban Terror, gratis...
CVE-2006-2082
Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the svallowdownload cvar is enabled, allows remote attackers to read arbitrary files from the serve...
Quake3 Arena 1.29 f/g DOS
It was possible to crash the Quake3 Arena daemon by sending a specially crafted login string. SPDX-FileCopyrightText: 2001 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2000-0303
Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot .. attack...
CVE-2000-0303
Quake3 Arena is affected by CVE-2000-0303 due to a path traversal (dot dot) vulnerability that enables a malicious server operator to read or modify files on a client. The issue, described in the NVD entry, indicates a network-accessible vector with low attack complexity and no authentication req...