CVE-1999-1569

Quake 1 and NetQuake servers allow remote attackers to cause a denial of service resource exhaustion or forced disconnection via a flood of spoofed UDP connection packets, which exceeds the server's player limit...

CVE-2002-0770

Quake 2 Q2 server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "$" macros, which causes the server to expand the macros and leak the information, as demonstrated...

CVE-2002-0770

The CVE-2002-0770 issue affects Quake II server 3.20/3.21, where a client can trigger the server to expand a variable like "$rcon_password" due to console variable expansion on unexpanded client input. This information leakage enables attackers to obtain sensitive credentials and potentially take...

CVE-2002-0770

Quake 2 Q2 server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "$" macros, which causes the server to expand the macros and leak the information, as demonstrated...

id Software Quake II Server 3.203.21 - Remote Information Disclosure

id Software Quake II Server 3.203.21 - Remote Information Disclosure source: https://www.securityfocus.com/bid/4744/info Quake II is a multiplayer game released by id Software. The source code has been made publically available, and versions are available for Windows and Linux. A vulnerability ha...

Remote quake 2 3.2x server cvar leak

Hello, A problem exists in the Quake II Server for any OS probably all versions; tested 3.20 and 3.21 discovered by 'Redix' that allows server cvars containing sensitve information to be leaked. This has been known for a little over 2 months, I run several Q2 servers and only learned of it today...

id Software Quake II Server 3.20/3.21 - Remote Information Disclosure

source: https://www.securityfocus.com/bid/4744/info Quake II is a multiplayer game released by id Software. The source code has been made publically available, and versions are available for Windows and Linux. A vulnerability has been reported in some versions of the Quake II server. While variab...

CVE-2001-1289

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service crash via a malformed connection packet that begins with several char-255 characters...

CVE-2001-1289

CVE-2001-1289 affects Quake 3 Arena 1.29f/g. A remote attacker can cause a denial of service (crash) by sending a malformed connection/login packet that begins with 0xFF characters, crashing the Quake3 Arena daemon. OpenVAS/NASL details indicate the affected service port 27960 and describe the at...

Quake 3 Arena Malformed Connection Packet DoS

It was possible to crash the Quake3 Arena daemon by sending a specially crafted login string. An attacker may use this attack to make this service crash continuously, preventing you from playing. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderso...

CVE-1999-1502

CVE-1999-1502 affects the Quake 1.9 client. It is due to buffer overflows triggered by long values in four fields (precache paths, server name, server address, argument to the map console command), allowing a remote attacker to execute arbitrary commands on the client. Exploitation details are no...

CVE-1999-1229

The CVE-1999-1229 issue affects the Quake 2 server 3.13 on Linux, where the server does not properly validate config.cfg permissions, allowing a local user to read arbitrary files via a symlink from config.cfg to the target file. The root cause is an insufficient permission check for the configur...

CVE-1999-1230

CVE-1999-1230 affects the Quake 2 server. A remote attacker can cause a denial of service by sending a spoofed UDP packet with a source address of 127.0.0.1, triggering the server to attempt a connection to itself. The provided documents explicitly describe the vulnerability and impact but do not...

CVE-1999-1229

Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file...

CVE-1999-1066

Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a "Smurf" style attack on another host, by spoofing the connection request...

CVE-1999-1230

Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to attempt to connect to itself...

CVE-1999-1502

Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long 1 precache paths, 2 server name, 3 server address, or 4 argument to the map console command...

CVE-1999-1066

Quake 1 game server is the affected component. The vulnerability arises because the server’s UDP initial-connection handling can generate a large amount of traffic, enabling an attacker to use the server as an amplifier in a Smurf-style attack via spoofed requests. The documents do not provide sp...

ADV: Quake 3 Arena 1.29f/g Vulnerability

-------------------------------------- :: Q30wnerz Advisory v1.0 - PUBLIC :: written by ttol -------------------------------------- :: Quake 3 Arena 1.29f/g Vulnerability -------------------------------------- ----------- :: Summary ----------- There exists a very large hole in Quake 3 Arena,...

DoS против Quake 3 Arena

Некорректный запрос приводит к краху сервера...