{"id":"CVE-2006-2082","details":"Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the sv_allowdownload cvar is enabled, allows remote attackers to read arbitrary files from the server via \"..\" sequences in a .pk3 file request.","modified":"2026-04-10T03:38:25.899828Z","published":"2006-05-10T02:18:00Z","related":["openSUSE-SU-2024:10863-1"],"references":[{"type":"WEB","url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045906.html"},{"type":"WEB","url":"http://securityreason.com/securityalert/880"},{"type":"WEB","url":"http://www.securityfocus.com/archive/1/433349/100/0/threaded"},{"type":"WEB","url":"http://www.securityfocus.com/bid/17924"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26347"}],"schema_version":"1.7.5"}