Valve Software Half-Life Dedicated Server 3.14.1 - Information DisclosureDenial of Service

Valve Software Half-Life Dedicated Server 3.14.1 - Information DisclosureDenial of Service source: https://www.securityfocus.com/bid/9070/info Half-Life dedicated server has been reported prone to an information disclosure vulnerability. This issue may also be exploited to deny service to...

Format string bug in Half-Life client, but is it really exploitable???

Hey, some weeks ago I found a format string bug in the Half-Life client. The bug happens when an unknown command is used and the game returns a string like the following: x02Unknown command: wrongcommandusedn | | | | | | | line feed | | command used exactly what has been written in the | | consol...

Half Life client format string bug

If adminmod installed using adminpsay command leads to format string bug...

Half-Life clients: buffer-overflow

Applications: Half-Life http://half-life.sierra.com Versions: 1.1.1.0 and previous versions including all MODs based on the game, such as Counter-Strike and DoD Platforms: Windows Bugs: Remote buffer overflow Risk: High Author: Auriemma Luigi Senior Security Researcher, PivX Solutions, LLC e-mail...

Multiple Half-Life bugs

Multiple buffer overflows...

Half-Life: fun with MODs

Applications: Half-Life http://half-life.sierra.com MODs. Versions: 1.1.1.0 Platforms: Windows Bugs: Buffer overflow in liblist.gam and arbitrary code execution through customized DLL files Risk: High Author: Auriemma Luigi Senior Security Researcher, PivX Solutions, LLC e-mail: [email protected]...

Half-Life servers: buffer-overflow and freeze

Applications: Half-Life http://half-life.sierra.com Versions: 1.1.1.0 and previous versions including all MODs based on the game, such as Counter-Strike and DoD 3.1.1.1c1 and 4.1.1.1a of the free dedicated server Platforms: Windows and Linux Bugs: Remote buffer overflow and Denial of Service Risk...

Valve Software Half-Life 1.1 Client - Connection Routine Buffer Overflow (1)

Valve Software Half-Life 1.1 Client - Connection Routine Buffer Overflow 1 // source: https://www.securityfocus.com/bid/8299/info // Half-Life Client has been reported prone to a remotely exploitable buffer overflow condition. // The issue presents itself in the client connection routine, used by...

Valve Software Half-Life Server 3.1.1.0 - Multiplayer Request Buffer Overflow

Valve Software Half-Life Server 3.1.1.0 - Multiplayer Request Buffer Overflow // source: https://www.securityfocus.com/bid/8300/info // Half-Life servers are prone to a buffer overflow that may be exploited by a malicious remote client. The vulnerability occurs because the software fails to...

Valve Software Half-Life Server 3.1.1.0 - Multiplayer Request Buffer Overflow

// source: https://www.securityfocus.com/bid/8300/info // Half-Life servers are prone to a buffer overflow that may be exploited by a malicious remote client. The vulnerability occurs because the software fails to sufficiently bounds-check client-supplied data during requests to join multiplayer...

Valve Software Half-Life 1.1 Client - Connection Routine Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/8299/info // Half-Life Client has been reported prone to a remotely exploitable buffer overflow condition. // The issue presents itself in the client connection routine, used by the client to negotiate a connection to the Half-Life game server. Due to ...

Valve Software Half-Life 1.1 Client - Connection Routine Buffer Overflow (2)

Valve Software Half-Life 1.1 Client - Connection Routine Buffer Overflow 2 source: https://www.securityfocus.com/bid/8299/info Half-Life Client has been reported prone to a remotely exploitable buffer overflow condition. The issue presents itself in the client connection routine, used by the clie...

Valve Software Half-Life Server 1.1.1.03.1.1.1c14.1.1.1a - Multiplayer Request Buffer Overflow

Valve Software Half-Life Server 1.1.1.03.1.1.1c14.1.1.1a - Multiplayer Request Buffer Overflow // source: https://www.securityfocus.com/bid/8300/info // Half-Life servers are prone to a buffer overflow that may be exploited by a malicious remote client. The vulnerability occurs because the softwa...

Valve Software Half-Life Server 1.1.1.0/3.1.1.1c1/4.1.1.1a - Multiplayer Request Buffer Overflow

// source: https://www.securityfocus.com/bid/8300/info // Half-Life servers are prone to a buffer overflow that may be exploited by a malicious remote client. The vulnerability occurs because the software fails to sufficiently bounds-//check client-supplied data during requests to join multiplaye...

[EXPL] Half-Life Exploit Code Released (Malformed Packet)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion In the US? Contact Beyond Security at our new California office housewarming rates on automated network vulnerability scanning. We also...

CVE-2002-0964

Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service resource exhaustion via multiple responses to the initial challenge with different cdkey values, which reaches the player limit and prevents other players from connecting until the original responses have...

CVE-2002-0964

The CVE-2002-0964 entry describes a denial-of-service vulnerability in Half-Life Server 1.1.1.0 and earlier. The root cause is a remote attacker sending multiple responses to the initial challenge using different cd_key values, exhausting server resources and reaching the player limit, preventing...

AMX Mod 0.9.2 - Remote amx_say Format String

AMX Mod 0.9.2 - Remote amxsay Format String // source: https://www.securityfocus.com/bid/6968/info A format string vulnerability has been discovered AMX Mod 0.9.2 and earlier which may be exploitable to execute arbitrary code on a target Half-Life server. The problem occurs when calling the...

AMX Mod 0.9.2 - Remote 'amx_say' Format String

// source: https://www.securityfocus.com/bid/6968/info A format string vulnerability has been discovered AMX Mod 0.9.2 and earlier which may be exploitable to execute arbitrary code on a target Half-Life server. The problem occurs when calling the 'amxsay' command. By passing specially constructe...

[VSA0303] Half-Life StatsMe remote (root) hole

void.at Security Advisory VSA0303 Overview ======== "statsme"1 is a popular plugin for the Half-Life Dedicated Server hlds. hlds is not only the server for the most popular online game today, "Counter-Strike", but for many other games too. Two security bugs in statsme make it possible to execute...