CVE-2000-0303: Id Software Quake 3 Arena

Medium severity, CVSS 6.4. EPSS: 1.3% chance of exploitation in the next 30 days.

Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.

Affected products

• Id Software Quake 3 Arena: version 1.16n only

Published 2000-05-03. Last modified 2026-06-16.