CVE-2000-0303

Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.