Information leakage in Quake2
Published:		15.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2011
Type:		remote
Level:		5/10
Description:		It's possible to retrieve any server variables vaules including $rcon_password by using modified client without $-variables expanding.

Affected:		ID : Quake II 3.20
		ID : Quake II 3.21

Original document

Richard Stanway, Remote quake 2 3.2x server cvar leak (15.05.2002)

Discuss:

Read or add your comments to this news (0 comments)