| Package | Affected versions | Patched versions |
|---|---|---|
| cube | = 2005-08-09 | |
| sauerbraten | = 2006-02-28 |
Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client exit) by forcing the server to change to a map (ogz) file whose name contains ".." sequences and has a certain length that prevents the addition of the ".ogz" extension.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free