NVD

Id
60787  
Name
CVE-2006-2082  
Description
Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the sv_allowdownload cvar is enabled, allows remote attackers to read arbitrary files from the server via ".." sequences in a .pk3 file request.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-05-09  
Modified Date
2008-09-05  
Seq
2006-2082  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
313902 60787 CVE-2006-2082 20060508 Two independent vulnerabilities (client and server side) in Quake3 engine and many derived games  View
313903 60787 CVE-2006-2082 880  View
313904 60787 CVE-2006-2082 20060508 Two independent vulnerabilities (client and server side) in Quake3 engine and many derived games  View
313905 60787 CVE-2006-2082 17924  View
313906 60787 CVE-2006-2082 quake3-sv-allowdownload-directory-traversal(26347)  View

Related JVN