Valve Software Half-Life Server 3.1.1.0 - Multiplayer Request Buffer Overflow

Valve Software Half-Life Server 3.1.1.0 - Multiplayer Request Buffer Overflow // source: https://www.securityfocus.com/bid/8300/info // Half-Life servers are prone to a buffer overflow that may be exploited by a malicious remote client. The vulnerability occurs because the software fails to...

Valve Software Half-Life 1.1 Client - Connection Routine Buffer Overflow (2)

Valve Software Half-Life 1.1 Client - Connection Routine Buffer Overflow 2 source: https://www.securityfocus.com/bid/8299/info Half-Life Client has been reported prone to a remotely exploitable buffer overflow condition. The issue presents itself in the client connection routine, used by the clie...

Valve Software Half-Life Server 1.1.1.03.1.1.1c14.1.1.1a - Multiplayer Request Buffer Overflow

Valve Software Half-Life Server 1.1.1.03.1.1.1c14.1.1.1a - Multiplayer Request Buffer Overflow // source: https://www.securityfocus.com/bid/8300/info // Half-Life servers are prone to a buffer overflow that may be exploited by a malicious remote client. The vulnerability occurs because the softwa...

Valve Software Half-Life 1.1 Client - Connection Routine Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/8299/info // Half-Life Client has been reported prone to a remotely exploitable buffer overflow condition. // The issue presents itself in the client connection routine, used by the client to negotiate a connection to the Half-Life game server. Due to ...

Valve Software Half-Life Server 1.1.1.0/3.1.1.1c1/4.1.1.1a - Multiplayer Request Buffer Overflow

// source: https://www.securityfocus.com/bid/8300/info // Half-Life servers are prone to a buffer overflow that may be exploited by a malicious remote client. The vulnerability occurs because the software fails to sufficiently bounds-//check client-supplied data during requests to join multiplaye...

Valve Software Half-Life Server 3.1.1.0 - Multiplayer Request Buffer Overflow

// source: https://www.securityfocus.com/bid/8300/info // Half-Life servers are prone to a buffer overflow that may be exploited by a malicious remote client. The vulnerability occurs because the software fails to sufficiently bounds-check client-supplied data during requests to join multiplayer...

[EXPL] Half-Life Exploit Code Released (Malformed Packet)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion In the US? Contact Beyond Security at our new California office housewarming rates on automated network vulnerability scanning. We also...

CVE-2002-0964

The CVE-2002-0964 entry describes a denial-of-service vulnerability in Half-Life Server 1.1.1.0 and earlier. The root cause is a remote attacker sending multiple responses to the initial challenge using different cd_key values, exhausting server resources and reaching the player limit, preventing...

CVE-2002-0964

Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service resource exhaustion via multiple responses to the initial challenge with different cdkey values, which reaches the player limit and prevents other players from connecting until the original responses have...

CVE-2002-0964: Undefined Security Weakness

Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service resource exhaustion via multiple responses to the initial challenge with different cdkey values, which reaches the player limit and prevents other players from connecting until the original responses have...

AMX Mod 0.9.2 - Remote amx_say Format String

AMX Mod 0.9.2 - Remote amxsay Format String // source: https://www.securityfocus.com/bid/6968/info A format string vulnerability has been discovered AMX Mod 0.9.2 and earlier which may be exploitable to execute arbitrary code on a target Half-Life server. The problem occurs when calling the...

AMX Mod 0.9.2 - Remote 'amx_say' Format String

// source: https://www.securityfocus.com/bid/6968/info A format string vulnerability has been discovered AMX Mod 0.9.2 and earlier which may be exploitable to execute arbitrary code on a target Half-Life server. The problem occurs when calling the 'amxsay' command. By passing specially constructe...

[VSA0303] Half-Life StatsMe remote (root) hole

void.at Security Advisory VSA0303 Overview ======== "statsme"1 is a popular plugin for the Half-Life Dedicated Server hlds. hlds is not only the server for the most popular online game today, "Counter-Strike", but for many other games too. Two security bugs in statsme make it possible to execute...

[VSA0301] Half-Life Clanmod remote (root) hole

void.at Security Advisory VSA0301 Clanmod1 is a plugin for the "Half-Life Server", hosting the most popular online game today, "Counter-Strike", among others. Overview ======== Due to a format string bug in clanmod, it is possible for a remote attacker who knows the rcon-password to remotely...

[VSA0304] Half-Life Client remote hole via Adminmod plugin

void.at Security Advisory VSA0304 Half-Life is the underlying game for the most popular online game today, "Counter-Strike", and others. Adminmod is a popular plugin to the half-life-server. Overview ======== Due to a format string in the Half-Life client, it is possible for an attacker who has...

Re: [VSA0304] Half-Life Client remote hole via Adminmod plugin

Dear VOID.AT Security, This bug is not related to adminmod, but is rather the bug in Half Life itself. At least absolutely same problem is in amx plugin. amxpsay ssss causes same trouble. So this is a bug in HalfLife client and may be exploited by malicious server operator including remote one wi...

Half-Life AdminMod 2.50 Plugin - Remote Format String

Half-Life AdminMod 2.50 Plugin - Remote Format String // source: https://www.securityfocus.com/bid/6580/info // A format string vulnerability has been discovered in the Half-Life AdminMod plugin. The problem occurs in commands which call the selfmessage function, which is used by other functions ...

Half-Life StatsMe 2.6.x Plugin - MakeStats Format String

Half-Life StatsMe 2.6.x Plugin - MakeStats Format String // source: https://www.securityfocus.com/bid/6578/info // The Half-Life StatsMe plug-in is prone to an exploitable format string vulnerability. This issue may be exploited by an attacker who can authenticate with the rcon-password of the...

Half-Life ClanMod 1.801.81 Plugin - Remote Format String

Half-Life ClanMod 1.801.81 Plugin - Remote Format String // source: https://www.securityfocus.com/bid/6577/info // A format string vulnerability has been discovered in the Half-Life ClanMod plugin. The problem occurs in the 'cmlog' command which is designed to write a message to the server log...

Half-Life 1.1 Client - Server Message Format String

// source: https://www.securityfocus.com/bid/6582/info // It has been reported that the Half-Life client contains a format string vulnerability. When receiving messages from an administrator through the adminmod add-on package, the client does not properly handle input. This could result in denia...