CVE-2023-38312

CVE-2023-38312 affects Valve Counter-Strike 8684: a directory traversal via the motdfile console variable allows a client with remote access to read arbitrary server files. Root cause: directory traversal vulnerability in the game server component. Impact: potential exposure of sensitive server f...

CVE-2023-38312: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability in Valve Counter-Strike 8684 allows a client with remote control access to a game server to read arbitrary files from the underlying server via the motdfile console variable...

CVE-2023-38312

A directory traversal vulnerability in Valve Counter-Strike 8684 allows a client with remote control access to a game server to read arbitrary files from the underlying server via the motdfile console variable...

Valve Counter-Strike 2 Path Traversal Vulnerability

Valve Counter-Strike 2 is an online game by Valve Corporation. A security vulnerability exists in Valve Counter-Strike 2 version 8684, which stems from the presence of a directory traversal vulnerability that allows an attacker to read arbitrary files from the underlying server via the motdfile...

CVE-2023-35855

A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable...

CVE-2023-35855

A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable...

CVE-2023-35855

A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable...

Buffer overflow

A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable...

PT-2023-25346 · Valve · Counter-Strike

Name of the Vulnerable Software and Affected Versions: Counter-Strike versions through 8684 Description: A buffer overflow issue allows a game server to execute arbitrary code on a remote client's machine. This is achieved by modifying the lservercfgfile console variable. Recommendations: For...

CVE-2023-35855

A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable...

CVE-2023-35855: Buffer Copy without Checking Size of Input

A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable...

CVE-2023-35855

A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable...

CVE-2023-35855

CVE-2023-35855 is a buffer overflow in Counter-Strike versions through 8684 that allows a game server to run arbitrary code on a remote client by modifying the lservercfgfile console variable. The root cause is a memory corruption condition enabling code execution with network access and no user ...

Counter-Strike:Global Offensive 安全漏洞

Valve Counter-Strike:Global Offensive is a first-person shooter game by Valve. A security vulnerability exists in Counter-Strike:Global Offensive. An attacker can exploit this vulnerability to execute arbitrary code on a remote client's machine...

Newspaper evades Russian censors, hides news in Counter-Strike map

A Finnish newspaper is making clever use of popular video game titles to promote press freedom and bypass Russian media restrictions regarding the invasion of Ukraine. The plan: Hide a secret room underneath a map, which players can stumble upon and see facts, figures, and photographs of whats be...

CVE-2021-37158

An issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. An authenticated attacker could inject OS commands by starting a Counter-Strike server and using the map field to enter a Bash command...

CVE-2021-37158

An issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. An authenticated attacker could inject OS commands by starting a Counter-Strike server and using the map field to enter a Bash command...

Command injection

An issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. An authenticated attacker could inject OS commands by starting a Counter-Strike server and using the map field to enter a Bash command...

Open Game Panel 操作系统命令注入漏洞

Open Game Panel is an open source game server control panel. It uses a web interface PHP/MySQL to control the agent Perl running on the server hosting the game. It is used to start/stop/monitor game server instances. A security vulnerability exists in Open Game Panel OGP-Agent-Linux, which stems...

CVE-2021-37158

OpenGamePanel OGP-Agent-Linux (affected through 2021-08-14) is vulnerable to an authenticated command-injection where an attacker can start a Counter-Strike server and inject OS commands by entering a Bash command in the map field. The issue is described consistently across multiple sources (e.g....