CVE-2006-1101
The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube...
The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attackers to cause a denial of service (segmentation fault) via long streams of input data that trigger an out-of-bounds read, as demonstrated using SV_EXT tag data in the Cube engine, which is not properly handled by getint.
Exploit likelihood
What each source reports
NVD Score used
The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attackers to cause a denial of service (segmentation fault) via long streams of input data that trigger an out-of-bounds read, as demonstrated using SV_EXT tag data in the Cube engine, which is not properly handled by getint.
- Record
CVE-2006-1101- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attackers to cause a denial of service (segmentation fault) via long streams of input data that trigger an out-of-bounds read, as demonstrated using SV_EXT tag data in the Cube engine, which is not properly handled by getint.
- Record
CVE-2006-1101- Updated
- 2026-11-02
EUVDEUVD-2006-1105 No score
The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attackers to cause a denial of service (segmentation fault) via long streams of input data that trigger an out-of-bounds read, as demonstrated using SV_EXT tag data in the Cube engine, which is not properly handled by getint.
- Record
EUVD-2006-1105- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jhff-r4p4-pgxx No score
The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube...
The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attackers to cause a denial of service (segmentation fault) via long streams of input data that trigger an out-of-bounds read, as demonstrated using SV_EXT tag data in the Cube engine, which is not properly handled by getint.
- Record
GHSA-jhff-r4p4-pgxx- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Sauerbraten 2006_02_28 - Multiple Buffer Overflow / Crash | 2006-03-06 |
| Exploit-DB | Cube 2005_08_29 - Multiple Buffer Overflow / Crash | 2006-03-06 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1101 is a medium vulnerability (CVSS 5.0) in Sauerbraten Cube, published March 9, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.10%, the 92nd percentile. No source names a fixed version.
References
securityfocus.com/archive/1/426867/100/0/threaded
secunia.com/advisories/19199
vupen.com/english/advisories/2006/0847