Ubuntu.comUB:CVE-2011-1412CVE-2011-1412
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.5%
sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World
of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows
remote game servers to execute arbitrary commands via shell metacharacters
in a long fs_game variable.
Bugs
References
archives.neohapsis.com/archives/fulldisclosure/2011-07/0338.html
worldofpadman.com/website/news/en/article/266/wop-1-5-1-1-hotfix-released-for-linux.html
launchpad.net/bugs/cve/CVE-2011-1412
nvd.nist.gov/vuln/detail/CVE-2011-1412
security-tracker.debian.org/tracker/CVE-2011-1412
www.cve.org/CVERecord?id=CVE-2011-1412
Related
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.5%