Description
clientcommands in Nexuiz before 2.2.1 has unknown impact and remote attack vectors related to "remote console command injection."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nexuiz | 2.2.1-1 | — |
| Debian 13 | nexuiz | 2.2.1-1 | — |
| Debian 12 | nexuiz | 2.2.1-1 | — |
References
- nexuiz-clientcommands-command-execution(30875) vdb-entry
- GLSA-200702-09 vendor-advisory
- 24298 third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=470675&group_id=81584
- ADV-2006-4992 vdb-entry
- 24313 third-party-advisory
- 21574 vdb-entry