PT-2004-3483 · Id · Quake Ii Server

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2592

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Quake II server versions prior to R1Q2

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by using a modified client that requests the server to send data stored at a negative array offset. The server fails to handle this request properly when processing Configstrings and Baselines.

Recommendations For Quake II server versions prior to R1Q2, update to version R1Q2 or later to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2004-2592

Produtos afetados

Quake Ii Server

Referências · 10

• 🔥 http://secunia.com/advisories/13013 · Exploit
• 🔥 https://exploit-db.com/exploits/24710 · Exploit
• 🔥 http://securitytracker.com/id?1011979 · Exploit
• http://securityfocus.com/bid/11551 · Nota
• http://osvdb.org/11181 · Nota
• http://secur1ty.net/advisories/001 · Aviso do Fabricante
• http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2592 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17890 · Nota