NetSight
medium5.0Public exploit code

CVE-2002-0964

Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via multiple responses to the initial challenge…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via multiple responses to the initial challenge with different cd_key values, which reaches the player limit and prevents other players from connecting until the original responses have timed out.

Affected products

VendorProductAffected versions
Valve SoftwareHalf-Life
Versions 1.1.0.4, 1.1.0.8, 1.1.0.9, 1.1.1.0
Valve SoftwareHalf-Life Dedicated Server
through 3.1
Version 3.1.3

References