PT-1998-1237 · Id · Quake

Publicado 1998-04-08 · Atualizado 2016-10-18 · CVE-1999-1502

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Quake version 1.9

Description The issue concerns buffer overflows in the Quake 1.9 client, which can be exploited by remote malicious servers. This can lead to the execution of arbitrary commands via several means, including long precache paths, server name, server address, or arguments to the map console command.

Recommendations For Quake version 1.9, consider restricting access to untrusted servers and avoiding the use of long paths or arguments that could trigger the buffer overflow until a fix is available. As a temporary workaround, disabling the map console command or limiting its input could help minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-1999-1502

Produtos afetados

Quake

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-1502 · Nota de Segurança
• http://securityfocus.com/bid/68 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=89205623028934&w=2 · Nota
• http://securityfocus.com/bid/69 · Aviso do Fabricante