CVE-2006-3325

Published Jun 30, 2006

Last updated 6 years ago

Overview

Description: client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier allows remote malicious servers to overwrite arbitrary write-protected cvars variables on the client, such as cl_allowdownload for Automatic Downloading and fs_homepath for the quake3 path, via a string of cvar names and values sent from the server. NOTE: this can be combined with another vulnerability to overwrite arbitrary files.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:id_software:quake_3_engine:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "68AE0171-46F1-4137-99BE-4B825A403D6E"
          },
          {
            "criteria": "cpe:2.3:a:id_software:quake_3_engine:1.32b:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FAC83733-F8B0-4985-BB48-2DA85C5C4393"
          },
          {
            "criteria": "cpe:2.3:a:id_software:quake_3_engine:1.32c:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "140AE21A-5028-485F-822C-4DA7F557A40C"
          },
          {
            "criteria": "cpe:2.3:a:id_software:quake_3_engine:icculus_803:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "875CD288-5C64-4396-8A2B-41B1309CE615"
          },
          {
            "criteria": "cpe:2.3:a:id_software:quake_3_engine:icculus_804:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B21AF67A-80EB-4596-882D-D184B73CAA0A"
          },
          {
            "criteria": "cpe:2.3:a:id_software:quake_3_engine:icculus_805:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BFDDEDC9-48D2-4580-AF82-A881B62E14F6"
          },
          {
            "criteria": "cpe:2.3:a:id_software:quake_3_engine:icculus_806:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EF097DA8-939B-45A7-944B-D164A3CDB5E1"
          },
          {
            "criteria": "cpe:2.3:a:id_software:quake_3_engine:icculus_807:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A9FFCE76-6F0E-497A-8146-79EAD182EA91"
          },
          {
            "criteria": "cpe:2.3:a:id_software:quake_3_engine:icculus_808:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B80A56A1-A70F-4F27-A065-DE64253E0A01"
          },
          {
            "criteria": "cpe:2.3:a:id_software:quake_3_engine:icculus_809:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F5CA8EB5-EC8E-418A-BF65-4DF652A1F59B"
          },
          {
            "criteria": "cpe:2.3:a:id_software:quake_3_engine:icculus_810:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BABA1BE2-19FB-42B8-AD43-FB200F74E0CE"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References