Valve Software Half-Life Engine Remote Denial of Service Vulnerability

Bugtraq ID:	10700
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2004-0724
Remote:	Yes
Local:	No
Published:	Jul 12 2004 12:00AM
Updated:	Jul 12 2009 06:16AM
Credit:	Discovery is credited to Terry Henning.
Vulnerable:	Valvesoftware Half-Life Dedicated Server 4.1.1 .1e Win32 Valvesoftware Half-Life Dedicated Server 4.1.1 .1e Linux Valvesoftware Half-Life Dedicated Server 4.1.1 .1d Beta Win32 Valvesoftware Half-Life Dedicated Server 4.1.1 .1c1 Win32 Valvesoftware Half-Life Dedicated Server 4.1.1 .0 Win32 + Valvesoftware Half-Life 1.1.1 .0 + Valvesoftware Half-Life 1.1 .0.9 + Valvesoftware Half-Life 1.1 .0.8 + Valvesoftware Half-Life 1.1 .0.4 Windows Valvesoftware Half-Life Dedicated Server 4.1 .0.9 Win32 + Valvesoftware Half-Life 1.1.1 .0 + Valvesoftware Half-Life 1.1 .0.9 + Valvesoftware Half-Life 1.1 .0.8 + Valvesoftware Half-Life 1.1 .0.4 Windows Valvesoftware Half-Life Dedicated Server 4.1 .0.8 Win32 + Valvesoftware Half-Life 1.1.1 .0 + Valvesoftware Half-Life 1.1 .0.9 + Valvesoftware Half-Life 1.1 .0.8 + Valvesoftware Half-Life 1.1 .0.4 Windows Valvesoftware Half-Life Dedicated Server 4.1 .0.7 Win32 + Valvesoftware Half-Life 1.1.1 .0 + Valvesoftware Half-Life 1.1 .0.9 + Valvesoftware Half-Life 1.1 .0.8 + Valvesoftware Half-Life 1.1 .0.4 Windows Valvesoftware Half-Life Dedicated Server 4.1 .0.6 Win32 + Valvesoftware Half-Life 1.1.1 .0 + Valvesoftware Half-Life 1.1 .0.9 + Valvesoftware Half-Life 1.1 .0.8 + Valvesoftware Half-Life 1.1 .0.4 Windows Valvesoftware Half-Life Dedicated Server 4.1 .0.4 Win32 + Valvesoftware Half-Life 1.1.1 .0 + Valvesoftware Half-Life 1.1 .0.9 + Valvesoftware Half-Life 1.1 .0.8 + Valvesoftware Half-Life 1.1 .0.4 Windows Valvesoftware Half-Life Dedicated Server 3.1.3 Valvesoftware Half-Life Dedicated Server 3.1.1 .1e Win32 Valvesoftware Half-Life Dedicated Server 3.1.1 .1e Linux Valvesoftware Half-Life Dedicated Server 3.1.1 .1d Linux Valvesoftware Half-Life Dedicated Server 3.1.1 .1c1 Linux Valvesoftware Half-Life Dedicated Server 3.1.1 .0 Linux + Valvesoftware Half-Life 1.1 .0.4 Linux Valvesoftware Half-Life Dedicated Server 3.1 .0.9 Linux + Valvesoftware Half-Life 1.1 .0.4 Linux Valvesoftware Half-Life Dedicated Server 3.1 .0.8 Linux + Valvesoftware Half-Life 1.1 .0.4 Linux Valvesoftware Half-Life Dedicated Server 3.1 .0.7 Linux + Valvesoftware Half-Life 1.1 .0.4 Linux Valvesoftware Half-Life Dedicated Server 3.1 .0.6 Linux + Valvesoftware Half-Life 1.1 .0.4 Linux Valvesoftware Half-Life Dedicated Server 3.1 .0.5 Linux + Valvesoftware Half-Life 1.1 .0.4 Linux Valvesoftware Half-Life Dedicated Server 3.1 .0.4 Linux + Valvesoftware Half-Life 1.1 .0.4 Linux Valvesoftware Half-Life Dedicated Server 3.1 - Caldera OpenLinux 2.4 - Debian Linux 2.3 - Slackware Linux 7.1 - SuSE Linux 7.0 Valvesoftware Half-Life 1.1.1 .0 Valvesoftware Half-Life 1.1 .0.9 Valvesoftware Half-Life 1.1 .0.8 - Microsoft Windows 98 SP1 - Microsoft Windows 98 b - Microsoft Windows 98 a - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Valvesoftware Half-Life 1.1 .0.4 Windows - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 Valvesoftware Half-Life 1.1 .0.4 Linux - Caldera OpenLinux 2.4 - Debian Linux 2.2 - Mandriva Linux Mandrake 7.2 - Mandriva Linux Mandrake 7.1 - Mandriva Linux Mandrake 7.0 - Redhat Linux 7.0 i386 - Redhat Linux 6.2 i386 - SCO eDesktop 2.4 - SCO eServer 2.3.1 - SuSE Linux 7.0 - SuSE Linux 6.4
Not Vulnerable:

Valve Software Half-Life Engine Remote Denial of Service Vulnerability

Half-Life is reported prone to a remote denial of service vulnerability. This issue presents itself when the application receives a malformed TCP packet.

All versions of Half-Life released before July 7, 2004 are reported to be vulnerable to this issue.

Valve Software Half-Life Engine Remote Denial of Service Vulnerability

A proof of concept exploit is available from the following location:

http://aluigi.altervista.org/poc/hlboom.zip

Valve Software Half-Life Engine Remote Denial of Service Vulnerability

Solution:
It is conjectured that versions of Half-Life released after July 7, 2004 are not vulnerable to this issue. This is not confirmed at the moment.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Valve Software Half-Life Engine Remote Denial of Service Vulnerability

References:

• Remote crash of Half-Life servers and clients (versions before the07 July 2004) (Luigi Auriemma )