| Max CVSS | 10.0 | Min CVSS | 5.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2011-3012 | 10.0 |
The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary co
|
09-10-2018 - 19:33 | 09-08-2011 - 20:55 | |
| CVE-2011-2764 | 10.0 |
The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dangerous file extensions, which a
|
09-10-2018 - 19:33 | 04-08-2011 - 02:45 | |
| CVE-2011-1412 | 7.5 |
sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fs_game variable
|
09-10-2018 - 19:30 | 04-08-2011 - 02:45 | |
| CVE-2012-3345 | 5.6 |
ioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file.
|
01-07-2017 - 01:29 | 15-06-2012 - 14:55 |