Half-Life Server New Player Flood Denial Of Service Vulnerability

Bugtraq ID:	5076
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 20 2002 12:00AM
Updated:	Jun 20 2002 12:00AM
Credit:	Discovered by Auriemma Luigi <bugtest at sitoverde.com>.
Vulnerable:	Valve Software Half-Life Dedicated Server 3.1.3 Valve Software Half-Life Dedicated Server 3.1 - Caldera OpenLinux 2.4 - Conectiva Linux 5.1 - Debian Linux 2.3 - S.u.S.E. Linux 7.0 - Slackware Linux 7.1 Valve Software Half-Life 1.1.1 .0 Valve Software Half-Life 1.1 .0.9 Valve Software Half-Life 1.1 .0.8 - Microsoft Windows 98 SP1 - Microsoft Windows 98 b - Microsoft Windows 98 a - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Valve Software Half-Life 1.1 .0.4 Windows - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 Valve Software Half-Life 1.1 .0.4 Linux - Caldera OpenLinux 2.4 - Debian Linux 2.2 - Mandriva Linux Mandrake 7.2 - Mandriva Linux Mandrake 7.1 - Mandriva Linux Mandrake 7.0 - RedHat Linux 7.0 i386 - RedHat Linux 6.2 i386 - S.u.S.E. Linux 7.0 - S.u.S.E. Linux 6.4 - SCO eDesktop 2.4 - SCO eServer 2.3.1

Not Vulnerable: