Unscored severity · published Apr 8, 1998
CVE-1999-1502
Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server name, (3) server address, or (4)…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server name, (3) server address, or (4) argument to the map console command.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QU
Quake · ID Software
1.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-1502
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-1502
marc.info
http://marc.info/?l=bugtraq&m=89205623028934&w=2
Vendor Advisory
http://www.securityfocus.com/bid/68
Vendor Advisory
http://www.securityfocus.com/bid/69
More from Quake
–
CVE-1999-1569
Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP connection packets, which…
–
CVE-2000-1080
Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet