Quake Precache Path Buffer Overflow Vulnerability

Bugtraq ID:	68
Class:	Boundary Condition Error
CVE:	CVE-1999-1502
Remote:	Yes
Local:	No
Published:	Apr 08 1998 12:00AM
Updated:	Jul 11 2009 12:16AM
Credit:	This vulnerability was published as "QuakeI client: serious holes." by Chris Evans <[email protected]> in the BugTraq mailing list on April 8, 1998.
Vulnerable:	id Software Quake 1.9
Not Vulnerable:

Quake Precache Path Buffer Overflow Vulnerability

The exists a buffer overflow in the Quake client.
As part of the network protocol between the
Quake client and server, the server gives the client
a list of precache paths. This arbiitrary length string
is copied by the client into a 64 byte buffer on the stack.

Quake Precache Path Buffer Overflow Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Quake Precache Path Buffer Overflow Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Quake Precache Path Buffer Overflow Vulnerability

References: