Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file.
> AFFECTED_PRODUCTS
Id Software - Quake 2 Server
<= 3.13
> HISTORIQUE DES MODIFICATIONS
Première apparition
25/02/1998 05:00
Source: NVD
📊
ENRICHISSEMENT
18/10/2025 13:59
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1
Dernière mise à jour: 1 year ago