medium5.0Public exploit code
CVE-2002-0964
Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via multiple responses to the initial challenge…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Half-Life Server 1.1/3.1 - New Player Flood Denial of Service2002-06-20 · dos · multiple · Verified
Impact
Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via multiple responses to the initial challenge with different cd_key values, which reaches the player limit and prevents other players from connecting until the original responses have timed out.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Valve Software | Half-Life | Versions 1.1.0.4, 1.1.0.8, 1.1.0.9, 1.1.1.0 |
| Valve Software | Half-Life Dedicated Server | through 3.1 Version 3.1.3 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0248.html
- http://www.iss.net/security_center/static/9412.php
- http://www.securityfocus.com/bid/5076
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0248.html
- http://www.iss.net/security_center/static/9412.php
- http://www.securityfocus.com/bid/5076