CVE-2006-0734

CVE-2006-0734 affects Valve Software’s Half-Life CSTRIKE Dedicated Server 1.6 and earlier. The vulnerability is in the SV_CheckForDuplicateNames function, which allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) by sending a backslash character at the e...

Valve CS source format string bug

Format string bug in name command...

CVE-2003-1325

The SVCheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated users to cause a denial of service infinite loop and daemon hang via a certain connection string to UDP port 27015 that represents "absence of player...

Half Life dedicated server information leak

Dear [email protected], Probably is known, but is not documented: Vendor: Valve software Software: hlds, all versions including steam. Problem: Information leak, DoS Author: SYZoSND Problem: in server configuration, if allowdownload = 1, it's possible to download any file from directory o...

Advisory: Half-Life remote buffer overflow vulnerability

Author: Stan Bubrouski [email protected] Date: September 20, 2001 Program: Half-Life Versions Affected: 1.1.0.8 September 19, 2001 and all previous versions Severity: A Half-Life server can exploit buffer overflow in Client to execute arbitrary code on their machines. Vendor: Valve Software...

half-life.txt

-----BEGIN PGP SIGNED MESSAGE----- Vulnerability Report by Mark Cooper Date Published: 16th October 2000 Advisory ID: N/A Bugtraq ID: 1799 http://www.securityfocus.com/bid/1799 CVE CAN: N/A Title: Half-Life Dedicated Server Vulnerability Class: Buffer Overflow Remotely Exploitable: Yes Locally...