Security Advisory

CVE-2004-2595

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-11-29 02:00:00
Last updated 2024-08-08 01:29:14
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a download command with a full pathname for a directory in the argument, which causes the server to crash when it cannot read data.