CVE-2011-1412
High
Description
sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fs_game variable.
SeverityHigh
CVSS7.5
Exploit probability—
ProductIoquake3 Engine
PublishedAug 4, 2011
First seenAug 4, 2011
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ioquake3 ioquake3_engine | No range specified | — |
| openarena openarena | 0.8.x-15, 0.8.x-16 | — |
| worldofpadman world_of_padman | 1.5 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.