CVE-1999-1229 - Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file

Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file

Published Sep 12, 2001

No CVSS score

EPSS 0.47%

Description

Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://www.securityfocus.com/archive/1/8590
mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1210
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/733
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.securityfocus.com/archive/1/8590		mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1210		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/733		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 12, 2001

Updated Aug 1, 2024

Reserved Aug 31, 2001

Link CVE-1999-1229

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-1999-1229

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Sep 12, 2001

Updated Aug 1, 2024

Link EUVD-1999-1210

GitHub

No data