Vulnerabilities

TI-2011-02653 CVE-2011-3012 · GHSA-w7ch-3pxv-5g4m

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and…

MEDIUM 54

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote att…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07955 Published 2011-08-09 No fix listed CWE-20

TI-2011-02423 CVE-2011-2764 · GHSA-2qjf-gm4f-4hxc

The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine…

MEDIUM 54

The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dang…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0869 Published 2011-08-04 No fix listed CWE-20

TI-2011-01236 CVE-2011-1412 · GHSA-9jhf-c2r9-9vhh

sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x…

MEDIUM 40

sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharact…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04212 Published 2011-08-04 No fix listed CWE-20

Vulnerabilities

Filters

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and…

The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine…

sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x…