CVE-2006-1102

Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client exit) by forcing the server to change to a map (ogz) file whose name contains ".." sequences and has a certain length that prevents the addition of the ".ogz" extension.

Date published : 2006-03-09

http://www.securityfocus.com/bid/16986

http://www.securityfocus.com/archive/1/426867/100/0/threaded