Searching r1q2 software vulnerabilities

Quake II server before R1Q2, as used in multipl

attackers | multiple | products | service | allows | remote | denial | before | server | cause | Quake | R1Q2 | used |

Quake II server before R1Q2, as used in multiple products, allows remote attackers cause a denial of service (application crash) via a modified client that asks the server to send data stored at a negative array offset, which is not handled when processing Configstrings and Baselines.


Buffer overflow in command-packet processing of

command-packet | processing | attackers | multiple | products | overflow | service | Buffer | allows | remote | before | denial | server | cause | Quake | R1Q2 | used |

Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a packet with a long cmd_args buffer.


Absolute path traversal vulnerability in Quake

vulnerability | attackers | traversal | multiple | products | Absolute | service | remote | allows | server | denial | before | cause | Quake | Linux | path | used | R1Q2 |

Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a download command with a full pathname for a directory in the argument, which causes the server to crash when it cannot read data.


Quake II server before R1Q2, as used in multipl

attackers | multiple | products | service | allows | remote | denial | before | server | cause | Quake | R1Q2 | used |

Quake II server before R1Q2, as used in multiple products, allows remote attackers cause a denial of service (exhaustion of connection slots) via a large number of connections from the same IP address.


Quake II server before R1Q2, as used in multipl

interferes | key/value | truncated | attackers | userinfo | IP-based | contains | server's | client's | products | multiple | address | already | ability | control | remote | server | before | enough | allows | string | access | bypass | cause | Quake | rules | which | find | R1Q2 | used | "ip" | pair | also | long | via | new | but |

Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already contains an "ip" key/value pair but is also long enough to cause a new key/value pair to be truncated, which interferes with the server's ability to find the client's IP address.


Quake II server before R1Q2, as used in multipl

reconnecting | disconnect | attackers | structure | prevents | server's | products | notified | multiple | exiting | session | changes | command | corrupt | without | server | allows | before | remote | client | which | Quake | being | state | valid | used | R1Q2 | data | then | mod |

Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by exiting a session without a valid disconnect command, then reconnecting, which prevents a mod from being notified of changes in the client state. NOTE: the impact of this issue will vary depending on which mod is being used.


Multiple buffer overflows in Quake II server be

overflows | products | Multiple | service | denial | buffer | server | before | users | cause | local | Quake | allow | R1Q2 | used |

Multiple buffer overflows in Quake II server before R1Q2, as used in multiple products, allow local users to cause a denial of service (application crash) via the server console or rcon.


Software vulnerabilities results 1 to 8 of 8     
Page: 1