217 matches found
Half-Life 1.1 Invalid Command Error Response Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8730/info It has been reported that Half-Life clients may be prone to a format string vulnerability. The problem occurs when an invalid command is issued to the server, and an error response is returned and displayed by t...
aGSM 2.35 Half-Life Server Info Response Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10989/info aGSM is reported prone to a remote buffer overflow vulnerability. The issue presents itself in the aGSM server information parsing routines for Half-Life game servers. Due to a lack of sufficient bounds checkin...
Valve Software Half-Life 1.1 Client Connection Routine Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/8299/info Half-Life Client has been reported prone to a remotely exploitable buffer overflow condition. The issue presents itself in the client connection routine, used by the client to negotiate a connection to the...
Steam Browser Protocol Vulnerability can allow hackers to hijack PC
Italian security Researchers Luigi Auriemma and Donato Ferrante from 'ReVuln' reported the flaw in Steam Browser Protocol. Stream the popular online distribution platform with 54 million users. The flaw allow the attacker to write arbitrary text to file and direct victims to external payloads and...
Design/Logic Flaw
Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service crash via multiple crafted login packets...
CVE-2008-7203
Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service crash via multiple crafted login packets...
CVE-2008-7203
CVE-2008-7203 affects Valve Software’s Half-Life/Counter-Strike 1.6. The vulnerability allows remote attackers to cause a denial of service (crash) by sending multiple crafted login packets over the network. The description indicates the issue is triggered by crafted login data, but the exact roo...
CVE-2008-7203
Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service crash via multiple crafted login packets...
CVE-2008-7203: Undefined Security Weakness
Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service crash via multiple crafted login packets...
PsychoStats v3.1 XSS
PsychoStats v3.1 XSS SOFTWARE: ========= PsychoStats v3.1 http://www.psychostats.com/ SEVERITY: ========= Normal INFO: ===== PsychoStats is open source software that creates comprehensive gaming statistics for players and clans for Half-Life and Half-Life 2 based games. This includes games like...
Half-Life CSTRIKE Server 1.6 Denial of Service Exploit (no-steam)
Exploit for multiple platform in category dos / poc ================================================================= Half-Life CSTRIKE Server 1.6 Denial of Service Exploit no-steam ================================================================= ---- Counter Strike 1.6 Denial Of Service POC...
Buffer overflow
Off-by-one error in the GeoIP module in the AMX Mod X 1.76d plugin for Half-Life Server might allow attackers to execute arbitrary code or cause a denial of service via unspecified input related to geolocation, which triggers an error message from the 1 geoipcode2 or 2 geoipcode3 function, leadin...
CVE-2003-1381
Format string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life Server, allows remote attackers to execute arbitrary commands via format string specifiers in the amxsay command...
CVE-2003-1381
AMX 0.9.2 and earlier, a plugin for Valve Software’s Half-Life Server, is affected by a format string vulnerability in the amx_say command. This allows remote attackers to execute arbitrary commands. Exploitation details, affected versions beyond those stated, and mitigations are not provided in ...
CVE-2003-1381: Use of Externally-Controlled Format String
Format string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life Server, allows remote attackers to execute arbitrary commands via format string specifiers in the amxsay command...
CVE-2007-5477
CVE-2007-5477 is a cross-site scripting (XSS) vulnerability in the auth.w component of the djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin. The issue allows remote attackers to inject arbitrary web script or HTML through the redir parameter. This is a user-facing web context vulnerable to...
CVE-2003-1325
The CVE affects Valve Software’s Half-Life CSTRIKE Dedicated Server. The SV_CheckForDuplicateNames function in versions such as 1.6 and earlier is vulnerable when handling a connection string to UDP port 27015, where a backslash character at the end of the string can trigger an infinite loop and ...
CVE-2003-1325
The SVCheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated users to cause a denial of service infinite loop and daemon hang via a certain connection string to UDP port 27015 that represents "absence of player...
CVE-2003-1325: Undefined Security Weakness
The SVCheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated users to cause a denial of service infinite loop and daemon hang via a certain connection string to UDP port 27015 that represents "absence of player...