PT-2004-3489 · Id · Quake Ii Server

Publicado 2004-12-31 · Atualizado 2008-09-05 · CVE-2004-2598

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Quake II server versions prior to R1Q2

Description The issue allows remote attackers to corrupt the server's client state data structure by exiting a session without a valid disconnect command and then reconnecting. This prevents a mod from being notified of changes in the client state. The impact of this issue varies depending on the mod being used.

Recommendations For Quake II server versions prior to R1Q2, update to version R1Q2 or later to resolve the issue. As a temporary workaround, consider restricting reconnections without valid disconnect commands to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2004-2598

Produtos afetados

Quake Ii Server

Referências · 6

• http://securityfocus.com/bid/11551 · Nota
• http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2598 · Nota de Segurança
• http://secur1ty.net/advisories/001 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html · Nota
• http://securitytracker.com/id?1011979 · Nota