CVE-2004-1958

Published Dec 31, 2004

Last updated 11 days ago

Overview

Description
Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in a UMOD (Unreal MOD) file.
Source
cve@mitre.org
NVD status
Modified
Products
unreal_engine, unreal_tournament, unreal_tournament_2003

Risk scores

CVSS 2.0

Type
Primary
Base score
5
Impact score
2.9
Exploitability score
10
Vector string
AV:N/AC:L/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov
NVD-CWE-Other

Social media

Hype score
Not currently trending

Configurations