CVE-2004-2598
Last modified
CVE-2004-2598 is a vulnerability of currently unknown severity. Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by exiting a session without a valid disconnect command, then reconnecting, which prevents a mod from being notified of changes in the client state. NOTE: the impact of this issue will vary depending on which mod is being used.. EPSS estimates a 1.39% chance of exploitation in the next 30 days.
Description
Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by exiting a session without a valid disconnect command, then reconnecting, which prevents a mod from being notified of changes in the client state. NOTE: the impact of this issue will vary depending on which mod is being used.
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| — | — | n/a |
References
- http://secur1ty.net/advisories/001Vendor Advisory
- http://secur1ty.net/advisories/001Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2004-2598?
How severe is CVE-2004-2598?
How do I fix CVE-2004-2598?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2004
- CVE-2004-2592Quake II server before R1Q2, as used in multiple products, a…
- CVE-2004-2593Buffer overflow in command-packet processing of Quake II ser…
- CVE-2004-2594Absolute path traversal vulnerability in Quake II server bef…
- CVE-2004-2595Absolute path traversal vulnerability in Quake II server bef…
- CVE-2004-2596Quake II server before R1Q2, as used in multiple products, a…
- CVE-2004-2597Quake II server before R1Q2, as used in multiple products, a…
- CVE-2004-2599Multiple buffer overflows in Quake II server before R1Q2, as…
- CVE-2004-2600The firmware for Intelligent Platform Management Interface (…
- CVE-2004-2601PHP remote file inclusion vulnerability in UberTec Help Cent…
- CVE-2004-2602PHP remote file inclusion vulnerability in UberTec Help Cent…
- CVE-2004-2603Cross-site scripting (XSS) vulnerability in the Search modul…
- CVE-2004-2604Cross-site scripting (XSS) vulnerability in index.php in PHP…
Are you affected by CVE-2004-2598?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST