Vulnerabilities

TI-2010-04800 CVE-2010-5077 · GHSA-hm3f-28vq-g8gm

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous…

LOW 38

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service (network traffic amplification) via a spoofed (1) getstat…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0211 Published 2014-10-27 No fix listed CWE-20

TI-2011-02423 CVE-2011-2764 · GHSA-2qjf-gm4f-4hxc

The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine…

MEDIUM 54

The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dang…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0869 Published 2011-08-04 No fix listed CWE-20

TI-2011-01236 CVE-2011-1412 · GHSA-9jhf-c2r9-9vhh

sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x…

MEDIUM 40

sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharact…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04212 Published 2011-08-04 No fix listed CWE-20

Vulnerabilities

Filters

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous…

The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine…

sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x…