Vulnerabilities > CVE-2004-2595 - Remote vulnerability in ID Software Quake II Server

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
id-software
NVD
Published: 2004-12-31
Updated: 2017-07-11

Summary

Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a download command with a full pathname for a directory in the argument, which causes the server to crash when it cannot read data.

Vulnerable Configurations

Part Description Count
Application
Id_Software
2

References