Lucene search

MitreCVE-2006-3325

HistoryJun 30, 2006 - 11:05 p.m.

CVE-2006-3325

2006-06-3023:05:00

mitre

web.nvd.nist.gov

cve

2006

3325

client

cl_parse.c

remote servers

overwrite

cvars variables

id3 quake 3 engine

icculus quake 3 engine

vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

High

EPSS

0.007

Percentile

80.7%

JSON

client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier allows remote malicious servers to overwrite arbitrary write-protected cvars variables on the client, such as cl_allowdownload for Automatic Downloading and fs_homepath for the quake3 path, via a string of cvar names and values sent from the server. NOTE: this can be combined with another vulnerability to overwrite arbitrary files.

Affected configurations

Nvd

Node

id_softwarequake_3_engine

id_softwarequake_3_engineMatch1.32b

id_softwarequake_3_engineMatch1.32c

id_softwarequake_3_engineMatchicculus_803

id_softwarequake_3_engineMatchicculus_804

id_softwarequake_3_engineMatchicculus_805

id_softwarequake_3_engineMatchicculus_806

id_softwarequake_3_engineMatchicculus_807

id_softwarequake_3_engineMatchicculus_808

id_softwarequake_3_engineMatchicculus_809

id_softwarequake_3_engineMatchicculus_810

VendorProductVersionCPE
id_softwarequake_3_engine*cpe:2.3:a:id_software:quake_3_engine:*:*:*:*:*:*:*:*
id_softwarequake_3_engine1.32bcpe:2.3:a:id_software:quake_3_engine:1.32b:*:*:*:*:*:*:*
id_softwarequake_3_engine1.32ccpe:2.3:a:id_software:quake_3_engine:1.32c:*:*:*:*:*:*:*
id_softwarequake_3_engineicculus_803cpe:2.3:a:id_software:quake_3_engine:icculus_803:*:*:*:*:*:*:*
id_softwarequake_3_engineicculus_804cpe:2.3:a:id_software:quake_3_engine:icculus_804:*:*:*:*:*:*:*
id_softwarequake_3_engineicculus_805cpe:2.3:a:id_software:quake_3_engine:icculus_805:*:*:*:*:*:*:*
id_softwarequake_3_engineicculus_806cpe:2.3:a:id_software:quake_3_engine:icculus_806:*:*:*:*:*:*:*
id_softwarequake_3_engineicculus_807cpe:2.3:a:id_software:quake_3_engine:icculus_807:*:*:*:*:*:*:*
id_softwarequake_3_engineicculus_808cpe:2.3:a:id_software:quake_3_engine:icculus_808:*:*:*:*:*:*:*
id_softwarequake_3_engineicculus_809cpe:2.3:a:id_software:quake_3_engine:icculus_809:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
id_software	quake_3_engine	*	cpe:2.3:a:id_software:quake_3_engine::::::::
id_software	quake_3_engine	1.32b	cpe:2.3:a:id_software:quake_3_engine:1.32b:::::::*
id_software	quake_3_engine	1.32c	cpe:2.3:a:id_software:quake_3_engine:1.32c:::::::*
id_software	quake_3_engine	icculus_803	cpe:2.3:a:id_software:quake_3_engine:icculus_803:::::::*
id_software	quake_3_engine	icculus_804	cpe:2.3:a:id_software:quake_3_engine:icculus_804:::::::*
id_software	quake_3_engine	icculus_805	cpe:2.3:a:id_software:quake_3_engine:icculus_805:::::::*
id_software	quake_3_engine	icculus_806	cpe:2.3:a:id_software:quake_3_engine:icculus_806:::::::*
id_software	quake_3_engine	icculus_807	cpe:2.3:a:id_software:quake_3_engine:icculus_807:::::::*
id_software	quake_3_engine	icculus_808	cpe:2.3:a:id_software:quake_3_engine:icculus_808:::::::*
id_software	quake_3_engine	icculus_809	cpe:2.3:a:id_software:quake_3_engine:icculus_809:::::::*

Rows per page:

1-10 of 111

References

aluigi.altervista.org/adv/q3cfilevar-adv.txt

secunia.com/advisories/20401

secunia.com/advisories/20851

securityreason.com/securityalert/1171

www.securityfocus.com/archive/1/438515/100/0/threaded

www.securityfocus.com/archive/1/438660/100/0/threaded

www.securityfocus.com/bid/18685

www.vupen.com/english/advisories/2006/2569

exchange.xforce.ibmcloud.com/vulnerabilities/26889

exchange.xforce.ibmcloud.com/vulnerabilities/27486

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

High

EPSS

0.007

Percentile

80.7%

JSON

Related for CVE-2006-3325