CVE

Id
5160  
CVE No.
CVE-2002-0770  
Status
Candidate  
Description
Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "$" macros, which causes the server to expand the macros and leak the information, as demonstrated using "say $rcon_password."  
Phase
Modified (20051128)  
Votes
NOOP(5) Armstrong, Cole, Cox, Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
27261 5160 CVE-2002-0770 BUGTRAQ:20020514 Remote quake 2 3.2x server cvar leak  View
27262 5160 CVE-2002-0770 URL:http://online.securityfocus.com/archive/1/272548  View
27263 5160 CVE-2002-0770 MISC:http://www.quakesrc.org/forum/topicDisplay.php?topicID=160  View
27264 5160 CVE-2002-0770 CERT-VN:VU#970915  View
27265 5160 CVE-2002-0770 URL:http://www.kb.cert.org/vuls/id/970915  View
27266 5160 CVE-2002-0770 BID:4744  View
27267 5160 CVE-2002-0770 URL:http://www.securityfocus.com/bid/4744  View
27268 5160 CVE-2002-0770 OSVDB:11187  View
27269 5160 CVE-2002-0770 URL:http://www.osvdb.org/11187  View
27270 5160 CVE-2002-0770 XF:quake2-unexpanded-var-disclosure(9095)  View

Related JVN