New bug found...

Thilo Schulz arny at ats.s.bawue.de
Mon May 8 19:27:31 EDT 2006


Hi,

Ludwig and me have found and reported a bug to ID that we haven't disclosed 
until today on the wish of ID.
The bug allows to download *any* file from sv_allowdownload enabled servers 
(like /etc/passwd)
You can find the advisory i sent to FD and bugtraq here:

http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045906.html

-- 
Thilo Schulz
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://icculus.org/pipermail/quake3/attachments/20060509/aac380f2/attachment.pgp>


More information about the quake3 mailing list