CVE-2004-2594

UNKNOWN

Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a "\/" in a pathname argument, as demonstrated by "download \/server.cfg"

Published Nov 29, 2005

Modified 2 years ago

Details

Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a "/" in a pathname argument, as demonstrated by "download /server.cfg".

References

WEB

http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html

ADVISORY

http://secunia.com/advisories/13013

WEB

http://secur1ty.net/advisories/001

WEB

http://securitytracker.com/id?1011979

WEB

http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/

WEB