CVE-2006-1102
Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client exit) by forcing the server to change to a map (ogz) file whose name contains ".." sequences and has a certain length that prevents the addition of the ".ogz" extension.
Date published : 2006-03-09
http://www.securityfocus.com/bid/16986
http://www.securityfocus.com/archive/1/426867/100/0/threaded