CVE-1999-1066: Sgi Quake 1 Server

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a "Smurf" style attack on another host, by spoofing the connection request.

Affected products

• Sgi Quake 1 Server: any version

Published 1999-12-22. Last modified 2026-06-16.