Path Traversal in Epic Games Unreal Engine
CVE-2003-1430
Directory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote attackers to access known files via a ".." (dot dot) in an unreal:// URL.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.028 (85.7th percentile) — read the EPSS interpretation.
Affected products
- Epic_games Unreal_engine — versions 226f, 433, 436
- Linux Linux_kernel
- Microsoft All_windows
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)