Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "$" macros, which causes the server to expand the macros and leak the information, as demonstrated using "say $rcon_password."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
id Software Quake II服务器远程信息泄露漏洞
Vulnerability Description
Quake II是一款由ID Software发布的多用户游戏服务程序，可使用在Linux和Unix操作系统下，也可使用在Microsoft Windows操作系统下。 Quake II在变量处理中存在漏洞，可导致远程攻击者获得服务器敏感信息。 攻击者可以通过使用本地扩展"$"宏的修改以后的客户端，发送类似'say $rcon_password'的命令给服务器，可导致Quake II服务器泄露rcon密码信息给攻击者，攻击者可以使用此信息对系统进一步进行攻击，如通过'rcon dir'查看系统目录结构和任
CVSS Information
N/A
Vulnerability Type
N/A