PT-2004-3490 · Id · Quake Ii Server

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2599

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Quake II server versions prior to R1Q2

Description The issue concerns multiple buffer overflows that can be triggered by local users, resulting in a denial of service, specifically causing the application to crash. This can be achieved via the server console or rcon.

Recommendations For Quake II server versions prior to R1Q2, update to version R1Q2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2004-2599

Affected Products

Quake Ii Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2004-2599 · Security Note
• http://secur1ty.net/advisories/001 · Vendor Advisory
• http://osvdb.org/11188 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17898 · Note
• http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2 · Note
• http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html · Note
• http://securitytracker.com/id?1011979 · Note