← Back to CVEs

CVE-2004-2598

N/A

Description

Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by exiting a session without a valid disconnect command, then reconnecting, which prevents a mod from being notified of changes in the client state. NOTE: the impact of this issue will vary depending on which mod is being used.

CVE Details

CVSS v3.1 ScoreN/A

Published12/31/2004

Last Modified4/16/2026

Sourcenvd

Honeypot Sightings0

Affected Products

id_software:quake_ii_server

References

http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html(cve@mitre.org)

http://secur1ty.net/advisories/001(cve@mitre.org)

http://securitytracker.com/id?1011979(cve@mitre.org)

http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/(cve@mitre.org)

http://www.securityfocus.com/bid/11551(cve@mitre.org)

http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html(af854a3a-2127-422b-91ae-364da2661108)

http://secur1ty.net/advisories/001(af854a3a-2127-422b-91ae-364da2661108)

http://securitytracker.com/id?1011979(af854a3a-2127-422b-91ae-364da2661108)

http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/11551(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.