Vulnerabilities > CVE-2006-2082 - Unspecified vulnerability in ID Software Quake 3 Engine

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
id-software
NVD
Published: 2006-05-10
Updated: 2024-11-21

Summary

Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the sv_allowdownload cvar is enabled, allows remote attackers to read arbitrary files from the server via ".." sequences in a .pk3 file request.

Vulnerable Configurations

Part Description Count
Application
Id_Software
1

References