CVE-2004-2598

Published Nov 29, 2005 CVSS 2.0 · 5.0 Medium EPSS 1.4% KEV · Not listed
Description
Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by exiting a session without a valid disconnect command, then reconnecting, which prevents a mod from being notified of changes in the client state. NOTE: the impact of this issue will vary depending on which mod is being used.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2004-2589 Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by exiting a session without a valid disconnect command, then reconnecting, which prevents a mod from being notified of changes in the client state. NOTE: the impact of this issue will vary depending on which mod is being used.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Sep 16, 2024, 7:55 PM
Reserved
Nov 29, 2005, 12:00 AM
Status
Modified
Published
Dec 31, 2004, 5:00 AM
Modified
Jun 16, 2026, 10:09 PM