Valve Software Half-Life Dedicated Server Malformed Parameter Loop Denial Of Service Vulnerability

Bugtraq ID:	8301
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 29 2003 12:00AM
Updated:	Mar 19 2015 08:16AM
Credit:	Discovery is credited to Auriemma Luigi.
Vulnerable:	Valve Software Half-Life Dedicated Server 4.1.1 .1c1 Win32 Valve Software Half-Life Dedicated Server 3.1.1 .1c1 Linux Valve Software Half-Life 1.1.1 .0 Valve Software Half-Life 1.1 .0.9 Valve Software Half-Life 1.1 .0.8 - Microsoft Windows 98 SP1 - Microsoft Windows 98 b - Microsoft Windows 98 a - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Valve Software Half-Life 1.1 .0.4 Windows - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 Valve Software Half-Life 1.1 .0.4 Linux - Caldera OpenLinux 2.4 - Debian Linux 2.2 - Mandriva Linux Mandrake 7.2 - Mandriva Linux Mandrake 7.1 - Mandriva Linux Mandrake 7.0 - RedHat Linux 7.0 i386 - RedHat Linux 6.2 i386 - S.u.S.E. Linux 7.0 - S.u.S.E. Linux 6.4 - SCO eDesktop 2.4 - SCO eServer 2.3.1
Not Vulnerable:	Valve Software Half-Life Dedicated Server 4.1.1 .1d Beta Win32 Valve Software Half-Life Dedicated Server 3.1.1 .1d Linux

Valve Software Half-Life Dedicated Server Malformed Parameter Loop Denial Of Service Vulnerability

Half-Life dedicated servers are prone to a input validation error that may be exploited by a malicious remote client. The vulnerability is due to input checking of client-supplied data during requests to join multiplayer games. This could result in a denial of service to users.

Valve Software Half-Life Dedicated Server Malformed Parameter Loop Denial Of Service Vulnerability

A proof-of-concept has been made available at the following location:

http://www.pivx.com/luigi/poc/hlbof-server.zip

Valve Software Half-Life Dedicated Server Malformed Parameter Loop Denial Of Service Vulnerability

Solution:
The vendor has released an upgrade to address this issue, users are advised to upgrade as soon as possible.


Valve Software Half-Life Dedicated Server 3.1.1 .1c1 Linux

• Valve Software hlds_l_3111d_update.tar.gz
  ftp://ftp.valvesoftware.com/Linux/hlds_l_3111d_update.tar.gz

Valve Software Half-Life Dedicated Server 4.1.1 .1c1 Win32

• Valve Software hlds4111d_beta.exe
  ftp://ftp.valvesoftware.com/Win32/hlds4111d_beta.exe

Valve Software Half-Life Dedicated Server Malformed Parameter Loop Denial Of Service Vulnerability

References:

• Half-Life servers: buffer-overflow and freeze (Auriemma Luigi )