CVE-2004-2595

Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service application crash via a download command with a full pathname for a directory in the argument, which causes the server to crash when it...

CVE-2004-2597

Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already contains an "ip" key/value pair but is also long enough to cause a new key/value pair to be truncated, which interferes with the server's...

CVE-2004-2598

Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by exiting a session without a valid disconnect command, then reconnecting, which prevents a mod from being notified of changes in the client state. NOTE: the...

CVE-2004-2599

Multiple buffer overflows in Quake II server before R1Q2, as used in multiple products, allow local users to cause a denial of service application crash via the server console or rcon...

CVE-2004-2594

Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a "/" in a pathname argument, as demonstrated by "download /server.cfg"...

CVE-2005-2774

Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the nickname...

CVE-2005-2774

Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the nickname...

CVE-2005-2774

CVE-2005-2774 affects Lithium II mod 1.24 for Quake 2. The vulnerability is a format string flaw in the nickname handling that can cause a server denial of service and may allow arbitrary code execution. Exploitation details are not provided in the available documents; no specific exploit vectors...

Quake 2 Lithium mode format string bug

Format string bug on parsing player's nickname...

Quake 2 Lithium Mod V 1.24 Macro Expansion Vuln?

Well I ran quake 2 using Lithium mod V 1.24 under OllyDBG and it seems that the lithium II mod for quake 2 latest PATCH 3.20 is parsing the '' in nicks. My well crafted nickname '999fffff' is being pushed onto the stack as 004144A1 |. 68 E821AF00 PUSH QUAKE2.00AF21E8 ; ASCII "0.000000 0.000000...

FreeBSD : quake2 -- multiple critical vulnerabilities (2c25e762-6bb9-11d9-93db-000a95bc6fae)

An advisory published by Richard Stanway describes numerous critical vulnerabilities in the Quake II engine : Due to unchecked input at various stages in the server, remote users are able to cause the server to crash, reveal sensitive information or potentially execute arbitrary code. %NASLMINLEV...

CVE-2005-0983

Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service client disconnect via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data...

CVE-2005-0983

CVE-2005-0983 concerns the Quake 3 engine (as used in multiple games). The vulnerability allows a remote attacker to cause a denial of service (client disconnect) by sending a long message that isn’t properly truncated, causing the engine to treat the remainder of the data as network input. Concr...

CVE-2005-0983

Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service client disconnect via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data...

In-game players kicking in the Quake 3 engine

Luigi Auriemma Application: Quake 3 engine http://www.idsoftware.com Vulnerables: - Call of Duty = 1.5 - Call of Duty: United Offensive = 1.51 - Quake III Arena = 1.32 - Return to Castle Wolfenstein = 1.41 - Soldier of Fortune II: Double Helix = 1.03 - Star Wars Jedi Knight II: Jedi Outcast = 1.0...

Soldier of Fortune 2 1.03 - cl_guid Server Crash

Soldier of Fortune 2 1.03 - clguid Server Crash / by Luigi Auriemma / include include include include / Quake 3 engine Huffman algorithm 0.2 ALL the code comes from the Q3fusion project of Andrey Nazarov: http://sourceforge.net/projects/q3fusion/ I have simply modified some variables and the...

CVE-2005-0430

The CVE-2005-0430 entry covers the Quake 3 engine (as used in multiple game packages). The issue arises from processing a long infostring, which can allow remote attackers to cause a denial of service (shutdown/crash of the game server) potentially via a buffer overflow. The description specifies...

CVE-2005-0430

The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service shutdown game server and possibly crash the server via a long infostring, possibly triggering a buffer overflow...

Infostring crash and shutdown in the Quake 3 engine

Luigi Auriemma Application: Quake 3 engine http://www.idsoftware.com Games: - Call of Duty = 1.5 - Call of Duty: United Offensive = 1.51 - Heavy Metal: F.A.K.K.2 = 1.02 - Quake III Arena = 1.32 - Return to Castle Wolfenstein = 1.41 - Soldier of Fortune II: Double Helix = 1.03 - Star Trek Voyager:...

CVE-2005-0430

The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service shutdown game server and possibly crash the server via a long infostring, possibly triggering a buffer overflow...