CVE-2004-2594

Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files…

published November 29, 2005

CVSS
—
EPSS
2%
Percentile
78.3
In the wild
Unconfirmed
What it is

Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a "\/" in a pathname argument, as demonstrated by "download \/server.cfg".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01801 · 78.3th percentile
Published
2005-11-29T02:00Z
EPSS history
Timeline
  • 29 NOV 02:00Z
    Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files…
    cvelistv5