Sauerbraten

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sauerbraten:sauerbraten:2006-02-28:*:*:*:*:*:*:*

part: a version: 2006-02-28 update: *

VendorSauerbraten (7e3d3f54-79cc-596f-b351-bbb06c9f8591)
ProductSauerbraten (9ec55a5d-686c-5b4e-aa16-d7c52e2b795e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/steshaw/sauerbraten purl2cpe 2026-06-01 10:16:02.301515

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-1103 vulnerable 2026-06-08 04:48:56.246060 Details available
engine/server.cpp in Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (segmentation fault) via a client that does not completely join the game and times out, which results in a null pointer dereference.
Published: 2006-03-09T11:00:00.000Z
Updated: 2024-08-07T16:56:15.662Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1102 vulnerable 2026-06-08 04:48:56.245758 Details available
Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client exit) by forcing the server to change to a map (ogz) file whose name contains ".." sequences and has a certain length that prevents the addition of the ".ogz" extension.
Published: 2006-03-09T11:00:00.000Z
Updated: 2024-08-07T16:56:15.775Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1101 vulnerable 2026-06-08 04:48:56.245356 Details available
The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attackers to cause a denial of service (segmentation fault) via long streams of input data that trigger an out-of-bounds read, as demonstrated using SV_EXT tag data in the Cube engine, which is not properly handled by getint.
Published: 2006-03-09T11:00:00.000Z
Updated: 2024-08-07T16:56:15.564Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1100 vulnerable 2026-06-08 04:48:56.244382 Details available
Buffer overflow in the sgetstr function in shared/cube.h in Sauerbraten 2006_02_28 and earlier, as derived from the Cube engine, allows remote attackers to execute arbitrary code via long streams of input data.
Published: 2006-03-09T11:00:00.000Z
Updated: 2024-08-07T16:56:15.657Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.