Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client exit) by forcing the server to change to a map (ogz) file whose name contains .. sequences and has a certain length that prevents the addition of the .ogz extension.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Cube | Sauerbraten | 2005-08-09 (including) | 2005-08-09 (including) |
Sauerbraten | Sauerbraten | 2006-02-28 (including) | 2006-02-28 (including) |