Unscored severity · published May 3, 2000
CVE-2000-0303
Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack
–
CVSS
1.3%
EPSS
No
On KEV
Description
Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
Q3
Quake 3 Arena · ID Software
1.16n · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0303
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0303
www.osvdb.org
http://www.osvdb.org/7531
Patch
http://www.quake3arena.com/news/index.html
www.securityfocus.com
http://www.securityfocus.com/bid/1169
xforce.iss.net
http://xforce.iss.net/alerts/advise50.php3
More from Quake 3 Arena
–
CVE-2006-2236
Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3) Quake III Arena 1.32b allows remote attackers to execute arbitrary…
–
CVE-2005-0983
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes…
–
CVE-2001-1289
Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters