Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
CVSS Metrics
