sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fs_game variable.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2011-08-04T01:00:00
Updated: 2018-10-09T18:57:01
Reserved: 2011-03-10T00:00:00
Link: CVE-2011-1412
JSON object: View
NVD Information
Status : Modified
Published: 2011-08-04T02:45:32.247
Modified: 2018-10-09T19:30:48.380
Link: CVE-2011-1412
JSON object: View
Redhat Information
No data.
CWE