Quake 3 Engine - Infostring Crash and Shutdown

Quake 3 Engine - Infostring Crash and Shutdown / by Luigi Auriemma / include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...

Quake 3 Engine Infostring Crash and Shutdown Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h...

Quake 3 Engine Infostring Crash and Shutdown Exploit

Exploit for unknown platform in category dos / poc ==================================================== Quake 3 Engine Infostring Crash and Shutdown Exploit ==================================================== / by Luigi Auriemma / include include include ifdef WIN32 include / Header file used fo...

Quake 3 Engine - Infostring Crash and Shutdown

/ by Luigi Auriemma / include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system...

CVE-2004-2592

Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service application crash via a modified client that asks the server to send data stored at a negative array offset, which is not handled when processing Configstrings and Baselines...

CVE-2004-2597

Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already contains an "ip" key/value pair but is also long enough to cause a new key/value pair to be truncated, which interferes with the server's...

CVE-2004-2595

Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service application crash via a download command with a full pathname for a directory in the argument, which causes the server to crash when it...

CVE-2004-2599

Multiple buffer overflows in Quake II server before R1Q2, as used in multiple products, allow local users to cause a denial of service application crash via the server console or rcon...

CVE-2004-2593

Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a packet with a long cmdargs buffer...

CVE-2004-2594

Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a "/" in a pathname argument, as demonstrated by "download /server.cfg"...

CVE-2004-2596

Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service exhaustion of connection slots via a large number of connections from the same IP address...

CVE-2004-2598

Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by exiting a session without a valid disconnect command, then reconnecting, which prevents a mod from being notified of changes in the client state. NOTE: the...

Multiple Vulnerabilites in Quake II Server

Multiple Vulnerabilites in Quake II Server ========================================== Product: Quake II Version: Tested on 3.2x, likely all Vendor: iD Software http://www.idsoftware.com/ Date: 2004-10-27 Risk: High possible remote code execution URL: http://secur1ty.net/advisories/001 Background...

ID Software Quake II Server 3.2 - Multiple Vulnerabilities

ID Software Quake II Server 3.2 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/11551/info Multiple remote vulnerabilities have been reported to affect Quake II. These issues are due to boundary condition checking failures, access validation failures and failures to handle...

ID Software Quake II Server 3.2 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/11551/info Multiple remote vulnerabilities have been reported to affect Quake II. These issues are due to boundary condition checking failures, access validation failures and failures to handle exceptional conditions. An attacker may leverage these issues...

quake2 -- multiple critical vulnerabilities

An advisory published by Richard Stanway describes numerous critical vulnerabilities in the Quake II engine: Due to unchecked input at various stages in the server, remote users are able to cause the server to crash, reveal sensitive information or potentially execute arbitrary code...

Policy - Quake Gaming Server Detection

Binary data 1190.prm...

MVDSV 0.165 b0.171 Quake Server - Download Buffer Overrun

MVDSV 0.165 b0.171 Quake Server - Download Buffer Overrun source: https://www.securityfocus.com/bid/9218/info The mvdsv Quake Server implementation is prone to a remotely exploitable buffer overrun vulnerability. This could permit execution of arbitrary code in the context of the server...

MVDSV 0.165 b/0.171 Quake Server - Download Buffer Overrun

source: https://www.securityfocus.com/bid/9218/info The mvdsv Quake Server implementation is prone to a remotely exploitable buffer overrun vulnerability. This could permit execution of arbitrary code in the context of the server...

CVE-1999-1569

CVE-1999-1569 affects Quake 1 and NetQuake servers. The vulnerability stems from handling a flood of spoofed UDP connection packets that surpass the server’s player limit, enabling remote attackers to cause a denial of service through resource exhaustion or forced disconnection. The provided docu...