Test ID:	1.3.6.1.4.1.25623.1.0.51678
Category:	Misc.
Title:	Quake2 Server Information Disclosure
Summary:	NOSUMMARY
Description:	Description: Quake II servers versions 3.20 and 3.21 suffer from an information disclosure vulnerability if a modified client passes unexpanded variables such as $rcon_password to the server. **** WARNING: We did not test for the existence of this vulnerability, only noted that port 27960, normally used by a Quake server, is open. Solution: Upgrade your software Risk factor : Medium CVSS Score: 5.0
Cross-Ref:	BugTraq ID: 4744 Common Vulnerability Exposure (CVE) ID: CVE-2002-0770 http://www.securityfocus.com/bid/4744 Bugtraq: 20020514 Remote quake 2 3.2x server cvar leak (Google Search) http://online.securityfocus.com/archive/1/272548 CERT/CC vulnerability note: VU#970915 http://www.kb.cert.org/vuls/id/970915 http://www.quakesrc.org/forum/topicDisplay.php?topicID=160 http://www.osvdb.org/11187 http://www.iss.net/security_center/static/9095.php
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.