CVE

Id
18186  
CVE No.
CVE-2006-2082  
Status
Candidate  
Description
Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the sv_allowdownload cvar is enabled, allows remote attackers to read arbitrary files from the server via ".." sequences in a .pk3 file request.  
Phase
Assigned (20060428)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
156824 18186 CVE-2006-2082 BUGTRAQ:20060508 Two independent vulnerabilities (client and server side) in Quake3 engine and many derived games  View
156825 18186 CVE-2006-2082 URL:http://www.securityfocus.com/archive/1/archive/1/433349/100/0/threaded  View
156826 18186 CVE-2006-2082 FULLDISC:20060508 Two independent vulnerabilities (client and server side) in Quake3 engine and many derived games  View
156827 18186 CVE-2006-2082 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045906.html  View
156828 18186 CVE-2006-2082 BID:17924  View
156829 18186 CVE-2006-2082 URL:http://www.securityfocus.com/bid/17924  View
156830 18186 CVE-2006-2082 SREASON:880  View
156831 18186 CVE-2006-2082 URL:http://securityreason.com/securityalert/880  View
156832 18186 CVE-2006-2082 XF:quake3-sv-allowdownload-directory-traversal(26347)  View

Related JVN