CVE-1999-1066
MediumExploitation Probability (EPSS)
Elevated risk66th percentile - higher than 66% of all known CVEs
Summary
The Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, allowing remote attackers to use the server as an amplifier in a 'Smurf' style attack on another host by spoofing the connection request.
Risk Assessment
Attackers can leverage the server to conduct DDoS attacks on other systems, potentially leading to service disruption and loss of availability.
Recommendation
It is recommended to limit the server's responses to UDP requests and implement filters to block spoofed connection requests.
Original NVD description (English source)
Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a "Smurf" style attack on another host, by spoofing the connection request.