CVE-2004-2595
Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a download command with a full pathname for a directory in the…
Does this matter?
Lower severity and a low EPSS score (2.83%). Track it; it rarely justifies an emergency change on its own.
Description
Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a download command with a full pathname for a directory in the argument, which causes the server to crash when it cannot read data.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 2.83% probability · 86th percentile
- CISA KEV
- Not listed
- Affected
- id software/quake ii server linux
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html
- http://secunia.com/advisories/13013Vendor Advisory
- http://secur1ty.net/advisories/001Vendor Advisory
- http://securitytracker.com/id?1011979
- http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/
- http://www.osvdb.org/11184
- http://www.securityfocus.com/bid/11551
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17893
- http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html
- http://secunia.com/advisories/13013Vendor Advisory
- http://secur1ty.net/advisories/001Vendor Advisory
- http://securitytracker.com/id?1011979
- http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/
- http://www.osvdb.org/11184
- http://www.securityfocus.com/bid/11551
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17893
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.