exploits , vulnerabilities , articles , Half-Life Invalid Command Error Response Format String Vulnerability

Title	Half-Life Invalid Command Error Response Format String Vulnerability
Published	2003-09-29-12:00AM
Updated	2003-09-29-09:55PM
Class	Input Validation Error
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	This vulnerability was reported by Luigi Auriemma.
Vulnerable	Valve Software HalfLife 1.1.1 .0 Valve Software HalfLife 1.1 .0.9 Valve Software HalfLife 1.1 .0.8 Microsoft Windows 98 Microsoft Windows 98 a Microsoft Windows 98 b Microsoft Windows 98 SP1 Microsoft Windows 98SE Microsoft Windows NT 4.0 Microsoft Windows NT 4.0 SP1 Microsoft Windows NT 4.0 SP2 Microsoft Windows NT 4.0 SP3 Microsoft Windows NT 4.0 SP4 Microsoft Windows NT 4.0 SP5 Microsoft Windows NT 4.0 SP6 Microsoft Windows NT 4.0 SP6a Valve Software HalfLife 1.1 .0.4 Windows Microsoft Windows 2000 Professional Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows 98SE Microsoft Windows ME Microsoft Windows NT 4.0
Not Vulnerable
Code	A tool has been released by Luigi Auriemma that is designed to demonstrate the issue on vulnerable clients. However, currently we are not aware of any exploits for this issue. /data/vulnerabilities/exploits/hlclientfs.zip
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-17 Mozilla Firefox and SeaMonkey Theora Video Library Remote Integer Overflow Vulnerability
• 2009-12-17 Mozilla Firefox and Sea Monkey Insecure Protocol Location Bar Spoofing Vulnerability
• 2009-12-17 Mozilla Firefox and Sea Monkey Content Injection Spoofing Vulnerability
• 2009-12-17 Mozilla Firefox/SeaMonkey GeckoActiveXObject Exception Message COM Object Enumeration Vulnerability
• 2009-12-16 ZABBIX Denial Of Service and SQL Injection Vulnerabilities
• 2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
• 2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
• 2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
• 2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
• 2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Thu, 17 Dec 2009 08:30:42 +0000