CVE-2006-2236

Buffer overflow in the Quake 3 Engine, as used by 1 ET 2.60, 2 Return to Castle Wolfenstein 1.41, and 3 Quake III Arena 1.32b allows remote attackers to execute arbitrary commands via a long remapShader command...

DEBIAN-CVE-2006-2236

Buffer overflow in the Quake 3 Engine, as used by 1 ET 2.60, 2 Return to Castle Wolfenstein 1.41, and 3 Quake III Arena 1.32b allows remote attackers to execute arbitrary commands via a long remapShader command...

CVE-2006-2236

Buffer overflow in the Quake 3 Engine, as used by 1 ET 2.60, 2 Return to Castle Wolfenstein 1.41, and 3 Quake III Arena 1.32b allows remote attackers to execute arbitrary commands via a long remapShader command...

CVE-2006-2236

Buffer overflow in the Quake 3 Engine, as used by 1 ET 2.60, 2 Return to Castle Wolfenstein 1.41, and 3 Quake III Arena 1.32b allows remote attackers to execute arbitrary commands via a long remapShader command...

CVE-2006-2236

The CVE-2006-2236 issue affects the Quake 3 engine as used in ET 2.60, Return to Castle Wolfenstein 1.41, and Quake III Arena 1.32b, caused by a boundary handling error in the remapShader command that leads to a buffer overflow. This allows a remote attacker to execute arbitrary commands on affec...

CVE-2006-2236

Buffer overflow in the Quake 3 Engine, as used by 1 ET 2.60, 2 Return to Castle Wolfenstein 1.41, and 3 Quake III Arena 1.32b allows remote attackers to execute arbitrary commands via a long remapShader command...

[SA19984] Quake 3 Engine "remapShader" Command Buffer Overflow

TITLE: Quake 3 Engine "remapShader" Command Buffer Overflow SECUNIA ADVISORY ID: SA19984 VERIFY ADVISORY: http://secunia.com/advisories/19984/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: Quake3 Engine 3.x http://secunia.com/product/4653/ DESCRIPTION: landser h...

Quake 3 Engine 1.32b R_RemapShader() Remote Client BoF Exploit

No description provided by source. // remapthis.c - "RRemapShader" q3 engine 1.32b client remote bof exploit // by landser - landser at hotmail.co.il // // this code works as a preloaded shared library on a game server, // it hooks two functions on the running server: // svcdirectconnect that is...

[Full-disclosure] Multiple vulnerabilities in Alien Arena 2006 GE 5.00

Luigi Auriemma Application: Alien Arena 2006 Gold Edition http://red.planetarena.org Versions: = 5.00 Platforms: Windows and Linux Bugs: A safecprintf server format string B CmdSayf server buffer-overflow C Comsprintf crash Exploitation: A remote, versus server in-game B remote, versus server...

CVE-2004-2599

CVE-2004-2599 affects the Quake II server prior to R1Q2. The issue is described as multiple buffer overflows in the server, allowing local users to crash the application via the server console or rcon (denial of service). The connected documents provide the affected product and vulnerability clas...

CVE-2004-2596

Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service exhaustion of connection slots via a large number of connections from the same IP address...

CVE-2004-2592

The CVE-2004-2592 issue affects the Quake II server before R1Q2, used in multiple products. It allows a remote attacker to trigger a denial of service (server/application crash) by a modified client that requests data stored at a negative array offset during processing of Configstrings and Baseli...

CVE-2004-2595

CVE-2004-2595 affects the Quake II server on Linux before R1Q2. It is an absolute path traversal in the download command using a full pathname, causing the server to crash (denial of service). No remediation details are provided in the supplied documents.

CVE-2004-2593

CVE-2004-2593 concerns the Quake II server (before R1Q2) with a buffer overflow in command-packet processing triggered by a long cmd_args buffer. The flaw allows remote attackers to crash the server and, potentially, execute arbitrary code over the network. The published CVSS vector is AV:N/AC:L/...

CVE-2004-2596

The CVE-2004-2596 entry documents a network DoS in Quake II server before R1Q2 (used in multiple products): an attacker can exhaust server connection slots by opening a large number of connections from the same IP. The connected/OpenVAS entries reference the same vulnerability in FreeBSD ports (q...

CVE-2004-2597

Technical details about CVE-2004-2597 are not publicly available in the provided connected documents. No specific affected products/versions or remediation are stated here. Monitor for updates.

CVE-2004-2592

Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service application crash via a modified client that asks the server to send data stored at a negative array offset, which is not handled when processing Configstrings and Baselines...

CVE-2004-2594

CVE-2004-2594 affects the Quake II server on Windows prior to R1Q2. The vulnerability is an absolute path traversal in the server’s file access, allowing a remote attacker to read arbitrary files by including a "/" sequence in a pathname (example: download /server.cfg). The CVSS data indicates ne...

CVE-2004-2598

Affected software : Quake II server before R1Q2 (as used in multiple products). Vulnerability details : Remote attackers can corrupt the server’s client state data structure by exiting a session without a valid disconnect command and then reconnecting. This may prevent a mod from being notified o...

CVE-2004-2593

Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a packet with a long cmdargs buffer...