5 matches found
CVE-2007-5477
CVE-2007-5477 is a cross-site scripting (XSS) vulnerability in the auth.w component of the djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin. The issue allows remote attackers to inject arbitrary web script or HTML through the redir parameter. This is a user-facing web context vulnerable to...
Valve Software Half-Life Dedicated Server 3.1/4.1 - Information Disclosure/Denial of Service
source: https://www.securityfocus.com/bid/9070/info Half-Life dedicated server has been reported prone to an information disclosure vulnerability. This issue may also be exploited to deny service to legitimate users of the Half-Life dedicated server. The issue presents itself due to a flaw in...
Valve Software Half-Life Dedicated Server 3.14.1 - Information DisclosureDenial of Service
Valve Software Half-Life Dedicated Server 3.14.1 - Information DisclosureDenial of Service source: https://www.securityfocus.com/bid/9070/info Half-Life dedicated server has been reported prone to an information disclosure vulnerability. This issue may also be exploited to deny service to...
CVE-2000-0969: Undefined Security Weakness
Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon...
CVE-2000-0968: Undefined Security Weakness
Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command...