CVE-2006-1102: Sauerbraten Cube

Medium severity, CVSS 5.0. EPSS: 4.7% chance of exploitation in the next 30 days.

Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client exit) by forcing the server to change to a map (ogz) file whose name contains ".." sequences and has a certain length that prevents the addition of the ".ogz" extension.

Affected products

• Sauerbraten Cube: version 2005-08-09 only
• Sauerbraten Sauerbraten: version 2006-02-28 only

Published 2006-03-09. Last modified 2026-06-16.