Half-Life Server New Player Flood Denial Of Service Vulnerability
BID:5076
Info
Half-Life Server New Player Flood Denial Of Service Vulnerability
| Bugtraq ID: | 5076 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 20 2002 12:00AM |
| Updated: | Jun 20 2002 12:00AM |
| Credit: | Discovered by Auriemma Luigi <bugtest at sitoverde.com>. |
| Vulnerable: |
Valvesoftware Half-Life Dedicated Server 3.1.3 Valvesoftware Half-Life Dedicated Server 3.1 Valvesoftware Half-Life 1.1.1 .0 Valvesoftware Half-Life 1.1 .0.9 Valvesoftware Half-Life 1.1 .0.8 Valvesoftware Half-Life 1.1 .0.4 Windows Valvesoftware Half-Life 1.1 .0.4 Linux |
| Not Vulnerable: | |
Discussion
Half-Life Server New Player Flood Denial Of Service Vulnerability
Half-Life is a popular game distributed and maintained by Valve Software. It includes features that allow users to game locally, or in distributed network environments. Valve Software also distributes a dedicated server product.
A denial of service vulnerability has been reported in some versions of the Half-Life server. A remote party may create a large number of new users on a specific server through spoofing the connection conversation. As servers contain a set limit on the maximum number of players, server resources will be exhausted, and legitimate players will not be allowed to join the game.
Half-Life is a popular game distributed and maintained by Valve Software. It includes features that allow users to game locally, or in distributed network environments. Valve Software also distributes a dedicated server product.
A denial of service vulnerability has been reported in some versions of the Half-Life server. A remote party may create a large number of new users on a specific server through spoofing the connection conversation. As servers contain a set limit on the maximum number of players, server resources will be exhausted, and legitimate players will not be allowed to join the game.
Solution / Fix
Half-Life Server New Player Flood Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Half-Life Server New Player Flood Denial Of Service Vulnerability
References:
References:
- Valve Software Homepage (Valve Software)