CVE-1999-1229 describes a local file disclosure vulnerability in Quake 2 server version 3.13 on Linux. The server fails to properly validate file permissions for its config.cfg file, allowing a local attacker to create a symlink from config.cfg to any arbitrary file on the system. This enables unauthorized reading of sensitive files. The vulnerability has a low CVSS score of 2.1, indicating a low severity. It requires local access (AV:L) and has low attack complexity (AC:L), with no authentication needed (Au:N). The potential impact is limited to confidentiality (C:P), as it only allows reading of files, not modification or denial of service. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. The CVE has received no community discussion or media coverage, suggesting a lack of widespread attention or exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.13CPE matchmatch criteria | cpe:2.3:a:id_software:quake_2_server:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.