diff options
| author | thilo <thilo@edf5b092-35ff-0310-97b2-ce42778d08ea> | 2006-05-08 19:53:41 +0000 |
|---|---|---|
| committer | thilo <thilo@edf5b092-35ff-0310-97b2-ce42778d08ea> | 2006-05-08 19:53:41 +0000 |
| commit | cdda65c3ad30d7a01e75f18a7a470bc8cbb3a6b6 (patch) | |
| tree | 3a91e92eecea6bcf3b4533a6687efa0b3e781beb /code/server/sv_game.c | |
| parent | d859dca57dd0da983b50dba748f56a60216cc3a8 (diff) | |
| download | ioquake3-aero-cdda65c3ad30d7a01e75f18a7a470bc8cbb3a6b6.tar.gz ioquake3-aero-cdda65c3ad30d7a01e75f18a7a470bc8cbb3a6b6.zip | |
Fix bug that permits download of arbitrary files from a download enabled server by checking requested file name against the list of loaded pk3 files. See CVE-2006-2082
git-svn-id: svn://svn.icculus.org/quake3/trunk@777 edf5b092-35ff-0310-97b2-ce42778d08ea
Diffstat (limited to 'code/server/sv_game.c')
0 files changed, 0 insertions, 0 deletions