Hey Zodiac,
the directory traversal bug about you refer is this one:
http://www.securityfocus.com/archive/1/ ... 0/threaded
If you need to fix it you must simple set sv_allowdownload to 0 on your server, while if you want to test the bug I think you must modify the game executable or it's probably enough to play with some cvars... sincerely I tested in deep the Quake 3 engine many time ago and my memory sux to much for remember a way for requesting arbitrary files ih ih ih
About the section, uhmmm probably the correct one for your thread was Proof-of-concepts, since the general section is just this one (...anything else...)