Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client exit) by forcing the server to change to a map (ogz) file whose name contains .. sequences and has a certain length that prevents the addition of the .ogz extension.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sauerbraten | Sauerbraten | 2006-02-28 | 2006-02-28 |
| Cube | Sauerbraten | 2005-08-09 | 2005-08-09 |