Vulnerabilities > CVE-2004-2594 - Remote vulnerability in ID Software Quake II Server

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
id-software
NVD
Published: 2004-12-31
Updated: 2017-07-11

Summary

Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a "\/" in a pathname argument, as demonstrated by "download \/server.cfg".

Vulnerable Configurations

Part Description Count
Application
Id_Software
2

References