Epic Games Unreal Engine Unreal URL Directory Traversal Vulnerability

Bugtraq ID:	6775
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 05 2003 12:00AM
Updated:	Feb 05 2003 12:00AM
Credit:	Discovery of this vulnerability credited to Auriemma Luigi <[email protected]>.
Vulnerable:	Epic Games Unreal Engine 436 + ARUSH Devastation 390.0 + ARUSH Devastation 381.0 + ARUSH Devastation 380.0 + Atari Magic The Gathering: Battlegrounds 1.4 + Atari Magic The Gathering: Battlegrounds 1.3 + Atari Magic The Gathering: Battlegrounds 1.2 + Atari Magic The Gathering: Battlegrounds 1.1 + Atari Magic The Gathering: Battlegrounds 1.0 + Atari Nerf Arena Blast + Eidos DeusEx 1.2 + Eidos DeusEx 1.1 + Eidos DeusEx 1.0 + Human Head Studios Rune 1.0.1 + Human Head Studios Rune 1.0 + Microprose Software Star Trek: Klingon Honor Guard + Microprose Software Tactical Ops 3.4 + Microprose Software Tactical Ops 3.3 + Microprose Software Tactical Ops 3.2 + Microprose Software Tactical Ops 3.1 + Microprose Software Tactical Ops 3.0 + Rage Software Mobile Forces + Running With Scissors Postal 2 + Ubi Rainbow Six: Raven Shield 1.5 + Ubi Rainbow Six: Raven Shield 1.4 + Ubi Rainbow Six: Raven Shield 1.3 + Ubi Rainbow Six: Raven Shield 1.2 + Ubi Rainbow Six: Raven Shield 1.1 + Ubi Rainbow Six: Raven Shield 1.0 + United States Department of Defense America's Army 2.0 .0 + United States Department of Defense America's Army: SFAS 2.0 .0a + United States Department of Defense America's Army: SFAS 1.9 .0 Epic Games Unreal Engine 3 Epic Games Unreal Engine 226f
Not Vulnerable:

Epic Games Unreal Engine Unreal URL Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Epic Games Unreal Engine Unreal URL Directory Traversal Vulnerability

References:

• Home Page (Epic Games)
  
• Unreal engine: results of my research (Auriemma Luigi )
  
• Unreal Tournament Homepage (Epic Games)