NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
72975  CVE-2004-2598  Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server"s client state data structure by exiting a session without a valid disconnect command, then reconnecting, which prevents a mod from being notified of changes in the client state. NOTE: the impact of this issue will vary depending on which mod is being used.    Medium  2016-12-20  2008-09-05  View
72974  CVE-2004-2597  Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already contains an ip key/value pair but is also long enough to cause a new key/value pair to be truncated, which interferes with the server's ability to find the client's IP address.    Medium  2017-07-18  2017-07-10  View
72973  CVE-2004-2596  Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (exhaustion of connection slots) via a large number of connections from the same IP address.    Medium  2017-07-18  2017-07-10  View
72972  CVE-2004-2595  Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a download command with a full pathname for a directory in the argument, which causes the server to crash when it cannot read data.    Medium  2017-07-18  2017-07-10  View
72971  CVE-2004-2594  Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a / in a pathname argument, as demonstrated by download /server.cfg.    Medium  2017-07-18  2017-07-10  View

Page 15526 of 17672, showing 5 records out of 88360 total, starting on record 77626, ending on 77630

Actions