CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 2CVE-2011-1412 – Quake 3 Shell Injection / Code Execution
https://notcve.org/view.php?id=CVE-2011-1412
sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fs_game variable. sys/sys_unix.c del motor ioQuake3 en Unix y Linux, tal como se usa en World of Padman 1.5.x anteriores a 1.5.1.1 y OpenArena 0.8.x-15 y 0.8.x-16, permite a servidores del juego remotos ejecutar comandos arbitrarios a través de meta-caracteres de shell en una variable extensa fs_game. Multiple games using the Quake engine suffer from remote shell injection and code execution vulnerabilities. • http://archives.neohapsis.com/archives/fulldisclosure/2011-07/0338.html http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063460.html http://secunia.com/advisories/45417 http://secunia.com/advisories/45468 http://securityreason.com/securityalert/8324 http://svn.icculus.org/quake3?view=rev&revision=2097 http://thilo.tjps.eu/download/patches/ioq3-svn-r2097.diff http://worldofpadman.com/website/news/en/article/266/wop-1-5-1-1-hotfix-released-for-linux.html http://www&# • CWE-20: Improper Input Validation •
CVSS: 10.0EPSS: 10%CPEs: 7EXPL: 2CVE-2011-2764 – Quake 3 Shell Injection / Code Execution
https://notcve.org/view.php?id=CVE-2011-2764
The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dangerous file extensions, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates a Trojan horse DLL file. La función FS_CheckFilenameIsNotExecutable de qcommon/files.c en el motor de ioQuake3 1.36 y versiones anteriores, tal como se usa en "World of Padman", "Smokin' Guns", OpenArena, Tremulous y ioUrbanTerror, no detecta extensiones de archivo peligrosas, lo que permite a atacantes remotos ejecutar código arbitrario a través de un complemento de terceras partes modificado que crea un archivo DLL troyanizado. Multiple games using the Quake engine suffer from remote shell injection and code execution vulnerabilities. • http://archives.neohapsis.com/archives/fulldisclosure/2011-07/0338.html http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063460.html http://secunia.com/advisories/45539 http://secunia.com/advisories/45540 http://securityreason.com/securityalert/8324 http://svn.icculus.org/quake3?view=rev&revision=2098 http://thilo.tjps.eu/download/patches/ioq3-svn-r2098.diff http://www.securityfocus.com/archive/1/519051/100/0/threaded http://www.securityfocus.com/bid/48915 https:/&# • CWE-20: Improper Input Validation •