← Back to CVEs

CVE-2004-2597

N/A

Description

Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already contains an "ip" key/value pair but is also long enough to cause a new key/value pair to be truncated, which interferes with the server's ability to find the client's IP address.

CVE Details

CVSS v3.1 ScoreN/A

Published12/31/2004

Last Modified4/16/2026

Sourcenvd

Honeypot Sightings0

Affected Products

id_software:quake_ii_server

References

http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html(cve@mitre.org)

http://secunia.com/advisories/13013(cve@mitre.org)

http://secur1ty.net/advisories/001(cve@mitre.org)

http://securitytracker.com/id?1011979(cve@mitre.org)

http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/(cve@mitre.org)

http://www.osvdb.org/11186(cve@mitre.org)

http://www.securityfocus.com/bid/11551(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/17895(cve@mitre.org)

http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/13013(af854a3a-2127-422b-91ae-364da2661108)

http://secur1ty.net/advisories/001(af854a3a-2127-422b-91ae-364da2661108)

http://securitytracker.com/id?1011979(af854a3a-2127-422b-91ae-364da2661108)

http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/(af854a3a-2127-422b-91ae-364da2661108)

http://www.osvdb.org/11186(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/11551(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/17895(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.