CVE-2011-1412

CVE-2011-1412 describes a remote command execution vulnerability in the ioQuake3 engine, specifically affecting World of Padman 1.5.x and OpenArena 0.8.x on Unix and Linux systems. Attackers can exploit this by injecting shell metacharacters into a long fs_game variable, allowing arbitrary command execution on vulnerable game servers. With a CVSS score of 7.5, this is a high-severity vulnerability due to its network-based attack vector, low attack complexity, and potential for complete compromise (confidentiality, integrity, and availability). Despite its severity, there is no evidence of active exploitation, publicly available exploit code in common repositories like Metasploit or ExploitDB, nor significant community discussion or media coverage.