CVE-2004-2598
Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by exiting a session without a valid disconnect command, then reconnecting, which prevents a mod from being notified…
Does this matter?
Lower severity and a low EPSS score (1.39%). Track it; it rarely justifies an emergency change on its own.
Description
Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by exiting a session without a valid disconnect command, then reconnecting, which prevents a mod from being notified of changes in the client state. NOTE: the impact of this issue will vary depending on which mod is being used.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 1.39% probability · 71th percentile
- CISA KEV
- Not listed
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html
- http://secur1ty.net/advisories/001Vendor Advisory
- http://securitytracker.com/id?1011979
- http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/
- http://www.securityfocus.com/bid/11551
- http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html
- http://secur1ty.net/advisories/001Vendor Advisory
- http://securitytracker.com/id?1011979
- http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/
- http://www.securityfocus.com/bid/11551
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.