Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2004-2594

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Quake II Server用于互联网上多用户交互式的流行游戏。 Quake II Server在多个阶段没有正确检查用户输入，远程攻击者可以利用这些漏洞获得敏感信息，进行拒绝服务或可能以进程权限执行任意指令。 问题一是数组边界错误： 在处理连接过程中的configstrings和baselines数据缺少充分符号检查，结果可导致越界访问而崩溃。 问题二处理包时存在缓冲区溢出： 在接收到命令包时，服务器对接收字符串长度缺少正确的边界缓冲区检查，可导致缓冲区溢出。通过伪造源地址和UDP包，可能以进程权限在

AI Predicted 7.5 Difficulty: Easy EPSS 1.80% · P76
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2004-2594

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a "\/" in a pathname argument, as demonstrated by "download \/server.cfg".
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Quake II Server多个安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Quake II Server用于互联网上多用户交互式的流行游戏。 Quake II Server在多个阶段没有正确检查用户输入，远程攻击者可以利用这些漏洞获得敏感信息，进行拒绝服务或可能以进程权限执行任意指令。 问题一是数组边界错误： 在处理连接过程中的configstrings和baselines数据缺少充分符号检查，结果可导致越界访问而崩溃。 问题二处理包时存在缓冲区溢出： 在接收到命令包时，服务器对接收字符串长度缺少正确的边界缓冲区检查，可导致缓冲区溢出。通过伪造源地址和UDP包，可能以进程权限在
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2004-2594

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2004-2594

请登录查看更多情报信息。

Vendor Advisories for CVE-2004-2594 (4)

Mailing List Discussions for CVE-2004-2594 (1)

Other References for CVE-2004-2594 (2)

Same Patch Batch · n/a · 2005-11-29 · 61 CVEs total

CVE-2005-3884 Zainu 多个SQL注入漏洞
CVE-2005-3901 Macromedia Flash Communication Server RTMP数据验证漏洞
CVE-2005-3897 Apple Safari Javascript BODY事件拒绝服务漏洞
CVE-2005-3896 Mozilla Javascript BODY事件拒绝服务漏洞
CVE-2005-3895 Open Ticket Request System下载附件执行任意脚本漏洞
CVE-2005-3899 Google Talk自动更新拒绝服务漏洞
CVE-2005-2124 Microsoft Windows图形渲染引擎WMF格式堆溢出漏洞(MS05-053)
CVE-2005-2123 Microsoft Windows图形渲染引擎整数溢出漏洞(MS05-053)
CVE-2005-3886 Cisco Security Agent未明的本地保护绕过和权限提升漏洞
CVE-2005-3885 Inkscape不安全的临时文件创建漏洞
CVE-2005-3887 Gadu-Gadu不正确处理MS-DOS设备名漏洞
CVE-2005-3883 PHP mb_send_mail函数CRLF注入漏洞
CVE-2005-3882 FAQSystems FAQRing Answer.PHP SQL注入漏洞
CVE-2005-3881 Atlantis Knowledge Base Search.PHP SQL注入漏洞
CVE-2005-3880 KBase Express多个SQL注入漏洞
CVE-2005-3879 Softbiz Resource Repository Script多个SQL注入漏洞
CVE-2005-3878 PHP Doc System index.php 目录遍历漏洞
CVE-2005-3877 Simple Document Management System 多个SQL注入漏洞
CVE-2005-3876 ADC2000 NG Pro SQL注入漏洞
CVE-2005-3875 Enterprise Connector SQL注入漏洞

Showing top 20 of 61 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2004-2594

No comments yet

Leave a comment