CVE-2001-1289

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service crash via a malformed connection packet that begins with several char-255 characters...

id Software Quake 3 Arena Server 1.29 - Buffer Overflow

id Software Quake 3 Arena Server 1.29 - Buffer Overflow source: https://www.securityfocus.com/bid/3123/info Quake3 Arena Server is a software package designed to host multiple Quake 3 players over a network for interactive play. A vulnerability exists in this software that can allow a malicious...

id Software Quake 3 Arena Server 1.29 - Buffer Overflow

source: https://www.securityfocus.com/bid/3123/info Quake3 Arena Server is a software package designed to host multiple Quake 3 players over a network for interactive play. A vulnerability exists in this software that can allow a malicious user to remotely crash a Quake 3 Server. Execution of...

CVE-1999-1569

Quake 1 and NetQuake servers allow remote attackers to cause a denial of service resource exhaustion or forced disconnection via a flood of spoofed UDP connection packets, which exceeds the server's player limit...

ID Software Quake 3 - SMURF Denial of Service

ID Software Quake 3 - SMURF Denial of Service // source: https://www.securityfocus.com/bid/3060/info Quake 3 network play features contain a remotely exploitable denial of service vulnerability. A hostile client program can be used by to generate a large number of forged client queries on behalf ...

ID Software Quake 1.9 - Denial of Service

ID Software Quake 1.9 - Denial of Service // source: https://www.securityfocus.com/bid/3051/info Quake is a very popular 3D "first-person-shooter" game from ID software. A flaw has been identified in the product's network play features which allows a maliciously designed client to prevent...

ID Software Quake 3 - 'SMURF' Denial of Service

// source: https://www.securityfocus.com/bid/3060/info Quake 3 network play features contain a remotely exploitable denial of service vulnerability. A hostile client program can be used by to generate a large number of forged client queries on behalf of a target user. The server's responses flood...

ID Software Quake 1.9 - Denial of Service

// source: https://www.securityfocus.com/bid/3051/info Quake is a very popular 3D "first-person-shooter" game from ID software. A flaw has been identified in the product's network play features which allows a maliciously designed client to prevent legitimate players from connecting to the Quake...

CVE-2000-1080

CVE-2000-1080 applies to Quake 1, ProQuake 1.01 and earlier. The vulnerability arises from processing an empty/malformed UDP packet, causing a denial-of-service condition via remote network input. Affected components are the game server/client networking code handling UDP datagrams; the root caus...

CVE-2000-1080

Quake 1 quake1 and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed empty UDP packet...

CVE-2000-1080

Quake 1 quake1 and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed empty UDP packet...

Дыра в Quake 3 Arena

Со стороны сервера можно прочитать/записать любой файл на клиентской машине используя обратный путь в директориях...

CVE-1999-1066

Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a "Smurf" style attack on another host, by spoofing the connection request...

quake2-bof-DoS.txt

Date: Wed, 20 Jan 1999 11:32:53 -0900 From: Leif Sawyer To: [email protected] Subject: Quake 2 Server Crash As the admin of a number of quake servers, I get a lot of grief when the servers stop responding. So imagine my shock today when I found this in the log files: this occurrs multiple time...

quake2-more-bof.txt

Date: Fri, 22 Jan 1999 19:48:26 +0100 From: Patrick Oonk To: [email protected] Subject: More Quake2 buffer overflows and nuisances This was forwarded to me by Roderick van Domburg, Quake II admin at GamePoint www.gamepoint.net ----- Forwarded message from Roderick 'GoG' van Domburg ----- From...

id Software Solaris Quake II 3.133.14 QuakeWorld 2.02.1 Quake 1.93.133.14 - Command Execution

id Software Solaris Quake II 3.133.14 QuakeWorld 2.02.1 Quake 1.93.133.14 - Command Execution // source: https://www.securityfocus.com/bid/90/info The Quake server has a feature where it allows administrators to remotely send commands to the Quake console with a password. However, it is possible ...

id Software Solaris Quake II 3.13/3.14 / QuakeWorld 2.0/2.1 / Quake 1.9/3.13/3.14 - Command Execution

// source: https://www.securityfocus.com/bid/90/info The Quake server has a feature where it allows administrators to remotely send commands to the Quake console with a password. However, it is possible to remotely bypass authentication. In order for this to be exploited, the attacker would have ...

CVE-1999-1502

Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long 1 precache paths, 2 server name, 3 server address, or 4 argument to the map console command...

CVE-1999-1229

Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file...

CVE-1999-1230

Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to attempt to connect to itself...