exploits , vulnerabilities , articles , Valve Software Half-Life Dedicated Server Malformed Parameter Loop Denial Of Service Vulnerability

Title	Valve Software Half-Life Dedicated Server Malformed Parameter Loop Denial Of Service Vulnerability
Published	2003-07-29-12:00AM
Updated	2003-08-05-09:59PM
Class	Failure to Handle Exceptional Conditions
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	Discovery is credited to Auriemma Luigi.
Vulnerable	Valve Software HalfLife Dedicated Server 4.1.1 .1c1 Win32 Valve Software HalfLife Dedicated Server 3.1.1 .1c1 Linux Valve Software HalfLife 1.1.1 .0 Valve Software HalfLife 1.1 .0.9 Valve Software HalfLife 1.1 .0.8 Microsoft Windows 98 Microsoft Windows 98 a Microsoft Windows 98 b Microsoft Windows 98 SP1 Microsoft Windows 98SE Microsoft Windows NT 4.0 Microsoft Windows NT 4.0 SP1 Microsoft Windows NT 4.0 SP2 Microsoft Windows NT 4.0 SP3 Microsoft Windows NT 4.0 SP4 Microsoft Windows NT 4.0 SP5 Microsoft Windows NT 4.0 SP6 Microsoft Windows NT 4.0 SP6a Valve Software HalfLife 1.1 .0.4 Windows Microsoft Windows 2000 Professional Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows 98SE Microsoft Windows ME Microsoft Windows NT 4.0 Valve Software HalfLife 1.1 .0.4 Linux Caldera OpenLinux 2.4 Debian Linux 2.2 MandrakeSoft Linux Mandrake 7.0 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.2 RedHat Linux 6.2 i386 RedHat Linux 7.0 i386 S.u.S.E. Linux 6.4 S.u.S.E. Linux 7.0 SCO eDesktop 2.4 SCO eServer 2.3.1
Not Vulnerable	Valve Software Half-Life Dedicated Server 4.1.1 .1d Beta Win32 Valve Software Half-Life Dedicated Server 3.1.1 .1d Linux
Code	A proof-of-concept has been made available at the following location: http://www.pivx.com/luigi/poc/hlbof-server.zip
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-17 GNU Automake Insecure Directory Permissions Vulnerability
2009-12-17 Mozilla Firefox CVE-2009-3979 Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Mozilla Firefox CVE-2009-3981 Remote Memory Corruption Vulnerability
2009-12-17 Drupal Sections Module HTML Injection Vulnerability
2009-12-17 Mozilla Firefox and SeaMonkey Theora Video Library Remote Integer Overflow Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Insecure Protocol Location Bar Spoofing Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Content Injection Spoofing Vulnerability
2009-12-17 Mozilla Firefox/SeaMonkey GeckoActiveXObject Exception Message COM Object Enumeration Vulnerability
2009-12-16 ZABBIX Denial Of Service and SQL Injection Vulnerabilities
2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability