CVE-2000-0303

Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2000-05-03

Last modified

2024-08-08

Affected products

• Quake 3 Arena (Id Software)

References

• http://www.osvdb.org/7531
• http://www.quake3arena.com/news/index.html
• http://www.securityfocus.com/bid/1169
• http://xforce.iss.net/alerts/advise50.php3