CVE-2002-0770
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 5.5%
from disclosure to weapon0 days
Published on NVDJul 26
1st PoCMay 15
exploitation probability
5.5%top 8% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "$" macros, which causes the server to expand the macros and leak the information, as demonstrated using "say $rcon_password."
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21450⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.