medium5.0Public exploit code
CVE-2004-1958
Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Epic Games Unreal Tournament Engine 3 - UMOD Manifest.INI Arbitrary File Overwrite2004-04-22 · remote · multiple · Verified
Impact
Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in a UMOD (Unreal MOD) file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Epic Games | Unreal Engine | Versions 433, 436 |
| Epic Games | Unreal Tournament | Version 451b |
| Epic Games | Unreal Tournament 2003 | Versions 2199_macos, 2199_win32, 2225_macos, 2225_win32 |
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/umod-adv.txt
- http://marc.info/?l=bugtraq&m=108267310519459&w=2
- http://www.securityfocus.com/bid/10196
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15942
- http://aluigi.altervista.org/adv/umod-adv.txt
- http://marc.info/?l=bugtraq&m=108267310519459&w=2
- http://www.securityfocus.com/bid/10196
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15942