aGSM 2.35 Half-Life Server - Info Response Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/10989/info aGSM is reported prone to a remote buffer overflow vulnerability. The issue presents itself in the aGSM server information parsing routines for Half-Life game servers. Due to a lack of sufficient bounds checking performed on the hostname...

Ошибка переполнения буффера в aGsm версии 2.35c и в последней developer-версии (beta)...

Доброго времени суток! Мною обнаружена ошибка переполнения буффера и вероятно возможность удалённого исполнения вредоносного кода в последних версиях aGsm. Заключается она в следующем: При обработке ответа от Half-Life серверов, aGsm, как выяснилось, не проверяет длинну строки hostname, а копируе...

aGsm buffer overflow

Bufer overflow during Half-Life server reply analisys...

CVE-2004-0724

The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service server or client crash via an empty fragmented packet...

CVE-2004-0724

The CVE-2004-0724 entry concerns the Half-Life engine (pre-July 7, 2004). The vulnerability allows remote attackers to cause a denial of service (server or client crash) by sending an empty fragmented packet over the network. The NVD entry quotes a CVSSv2 base score of 5.0 (Medium) with network a...

CVE-2004-0724

The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service server or client crash via an empty fragmented packet...

CVE-2004-0724: Undefined Security Weakness

The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service server or client crash via an empty fragmented packet...

Remote crash of Half-Life servers and clients (versions before the 07 July 2004)

Luigi Auriemma Application: Half-Life engine http://half-life.sierra.com http://www.steampowered.com Versions: before the 07 July 2004 both Steam and not-Steam Platforms: Windows and Linux Bug: writing on a read-only memory zone causing crash Risk: high Exploitation: remote, versus server and...

CVE-2003-1325

The SVCheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated users to cause a denial of service infinite loop and daemon hang via a certain connection string to UDP port 27015 that represents "absence of player...

CVE-2003-1381

Format string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life Server, allows remote attackers to execute arbitrary commands via format string specifiers in the amxsay command...

Valve Software Half-Life Dedicated Server 3.1/4.1 - Information Disclosure/Denial of Service

source: https://www.securityfocus.com/bid/9070/info Half-Life dedicated server has been reported prone to an information disclosure vulnerability. This issue may also be exploited to deny service to legitimate users of the Half-Life dedicated server. The issue presents itself due to a flaw in...

Valve Software Half-Life Dedicated Server 3.14.1 - Information DisclosureDenial of Service

Valve Software Half-Life Dedicated Server 3.14.1 - Information DisclosureDenial of Service source: https://www.securityfocus.com/bid/9070/info Half-Life dedicated server has been reported prone to an information disclosure vulnerability. This issue may also be exploited to deny service to...

Half Life dedicated server information leak

Dear [email protected], Probably is known, but is not documented: Vendor: Valve software Software: hlds, all versions including steam. Problem: Information leak, DoS Author: SYZoSND Problem: in server configuration, if allowdownload = 1, it's possible to download any file from directory o...

Format string bug in Half-Life client, but is it really exploitable???

Hey, some weeks ago I found a format string bug in the Half-Life client. The bug happens when an unknown command is used and the game returns a string like the following: x02Unknown command: wrongcommandusedn | | | | | | | line feed | | command used exactly what has been written in the | | consol...

Half Life client format string bug

If adminmod installed using adminpsay command leads to format string bug...

Multiple Half-Life bugs

Multiple buffer overflows...

Half-Life clients: buffer-overflow

Applications: Half-Life http://half-life.sierra.com Versions: 1.1.1.0 and previous versions including all MODs based on the game, such as Counter-Strike and DoD Platforms: Windows Bugs: Remote buffer overflow Risk: High Author: Auriemma Luigi Senior Security Researcher, PivX Solutions, LLC e-mail...

Half-Life: fun with MODs

Applications: Half-Life http://half-life.sierra.com MODs. Versions: 1.1.1.0 Platforms: Windows Bugs: Buffer overflow in liblist.gam and arbitrary code execution through customized DLL files Risk: High Author: Auriemma Luigi Senior Security Researcher, PivX Solutions, LLC e-mail: [email protected]...

Half-Life servers: buffer-overflow and freeze

Applications: Half-Life http://half-life.sierra.com Versions: 1.1.1.0 and previous versions including all MODs based on the game, such as Counter-Strike and DoD 3.1.1.1c1 and 4.1.1.1a of the free dedicated server Platforms: Windows and Linux Bugs: Remote buffer overflow and Denial of Service Risk...

Valve Software Half-Life 1.1 Client - Connection Routine Buffer Overflow (1)

Valve Software Half-Life 1.1 Client - Connection Routine Buffer Overflow 1 // source: https://www.securityfocus.com/bid/8299/info // Half-Life Client has been reported prone to a remotely exploitable buffer overflow condition. // The issue presents itself in the client connection routine, used by...