CVE ID:	CVE-2004-2594
Description:	Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a "\/" in a pathname argument, as demonstrated by "download \/server.cfg".
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-2594 BugTraq ID: 11551 http://www.securityfocus.com/bid/11551 Bugtraq: 20041027 Multiple Vulnerabilites in Quake II Server (Google Search) http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html http://secur1ty.net/advisories/001 http://www.osvdb.org/11183 http://securitytracker.com/id?1011979 http://secunia.com/advisories/13013 XForce ISS Database: quake-path-information-disclosure(17892) https://exchange.xforce.ibmcloud.com/vulnerabilities/17892