Half-Life StatsMe Plug-in CMD_ARGV Buffer Overflow Vulnerability

Bugtraq ID:	6575
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 10 2003 12:00AM
Updated:	Jan 10 2003 12:00AM
Credit:	Discovery of this issue is credited to "VOID.AT Security" <crew@void.at>.
Vulnerable:	StatsMe StatsMe 2.6.19 Beta + Valve Software Half-Life Dedicated Server 4.1.1 .0 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.9 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.8 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.7 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.6 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.4 Win32 + Valve Software Half-Life Dedicated Server 3.1 .0.9 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.8 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.7 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.6 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.5 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.4 Linux StatsMe StatsMe 2.6.17 Beta UNSTABLE + Valve Software Half-Life Dedicated Server 4.1.1 .0 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.9 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.8 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.7 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.6 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.4 Win32 + Valve Software Half-Life Dedicated Server 3.1 .0.9 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.8 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.7 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.6 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.5 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.4 Linux StatsMe StatsMe 2.6.16 Beta + Valve Software Half-Life Dedicated Server 4.1.1 .0 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.9 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.8 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.7 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.6 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.4 Win32 + Valve Software Half-Life Dedicated Server 3.1 .0.9 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.8 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.7 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.6 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.5 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.4 Linux StatsMe StatsMe 2.6.9 + Valve Software Half-Life Dedicated Server 4.1.1 .0 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.9 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.8 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.7 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.6 Win32 + Valve Software Half-Life Dedicated Server 4.1 .0.4 Win32 + Valve Software Half-Life Dedicated Server 3.1 .0.9 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.8 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.7 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.6 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.5 Linux + Valve Software Half-Life Dedicated Server 3.1 .0.4 Linux

Not Vulnerable: