CVE

Id
11023  
CVE No.
CVE-2004-2597  
Status
Candidate  
Description
Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already contains an "ip" key/value pair but is also long enough to cause a new key/value pair to be truncated, which interferes with the server"s ability to find the client"s IP address.  
Phase
Assigned (20051129)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
77426 11023 CVE-2004-2597 BUGTRAQ:20041027 Multiple Vulnerabilites in Quake II Server  View
77427 11023 CVE-2004-2597 URL:http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html  View
77428 11023 CVE-2004-2597 MISC:http://secur1ty.net/advisories/001  View
77429 11023 CVE-2004-2597 CONFIRM:http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/  View
77430 11023 CVE-2004-2597 BID:11551  View
77431 11023 CVE-2004-2597 URL:http://www.securityfocus.com/bid/11551  View
77432 11023 CVE-2004-2597 OSVDB:11186  View
77433 11023 CVE-2004-2597 URL:http://www.osvdb.org/11186  View
77434 11023 CVE-2004-2597 SECTRACK:1011979  View
77435 11023 CVE-2004-2597 URL:http://securitytracker.com/id?1011979  View
77436 11023 CVE-2004-2597 SECUNIA:13013  View
77437 11023 CVE-2004-2597 URL:http://secunia.com/advisories/13013  View
77438 11023 CVE-2004-2597 XF:quake-ip-spoofing(17895)  View

Related JVN