• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Valve Software Half-Life Server Multiplayer Request Buffer Overflow Vulnerability

Bugtraq ID:	8300
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 29 2003 12:00AM
Updated:	Oct 17 2007 01:27AM
Credit:	Discovery is credited to Auriemma Luigi <aluigi@pivx.com>.
Vulnerable:	Valve Software Half-Life Dedicated Server 4.1.1 .1c1 Win32 Valve Software Half-Life Dedicated Server 4.1.1 .0 Win32 + Valve Software Half-Life 1.1.1 .0 + Valve Software Half-Life 1.1 .0.9 + Valve Software Half-Life 1.1 .0.8 + Valve Software Half-Life 1.1 .0.4 Windows Valve Software Half-Life Dedicated Server 4.1 .0.9 Win32 + Valve Software Half-Life 1.1.1 .0 + Valve Software Half-Life 1.1 .0.9 + Valve Software Half-Life 1.1 .0.8 + Valve Software Half-Life 1.1 .0.4 Windows Valve Software Half-Life Dedicated Server 4.1 .0.8 Win32 + Valve Software Half-Life 1.1.1 .0 + Valve Software Half-Life 1.1 .0.9 + Valve Software Half-Life 1.1 .0.8 + Valve Software Half-Life 1.1 .0.4 Windows Valve Software Half-Life Dedicated Server 4.1 .0.7 Win32 + Valve Software Half-Life 1.1.1 .0 + Valve Software Half-Life 1.1 .0.9 + Valve Software Half-Life 1.1 .0.8 + Valve Software Half-Life 1.1 .0.4 Windows Valve Software Half-Life Dedicated Server 4.1 .0.6 Win32 + Valve Software Half-Life 1.1.1 .0 + Valve Software Half-Life 1.1 .0.9 + Valve Software Half-Life 1.1 .0.8 + Valve Software Half-Life 1.1 .0.4 Windows Valve Software Half-Life Dedicated Server 4.1 .0.4 Win32 + Valve Software Half-Life 1.1.1 .0 + Valve Software Half-Life 1.1 .0.9 + Valve Software Half-Life 1.1 .0.8 + Valve Software Half-Life 1.1 .0.4 Windows Valve Software Half-Life Dedicated Server 3.1.1 .1c1 Linux Valve Software Half-Life Dedicated Server 3.1.1 .0 Linux + Valve Software Half-Life 1.1 .0.4 Linux Valve Software Half-Life Dedicated Server 3.1 .0.9 Linux + Valve Software Half-Life 1.1 .0.4 Linux Valve Software Half-Life Dedicated Server 3.1 .0.8 Linux + Valve Software Half-Life 1.1 .0.4 Linux Valve Software Half-Life Dedicated Server 3.1 .0.7 Linux + Valve Software Half-Life 1.1 .0.4 Linux Valve Software Half-Life Dedicated Server 3.1 .0.6 Linux + Valve Software Half-Life 1.1 .0.4 Linux Valve Software Half-Life Dedicated Server 3.1 .0.5 Linux + Valve Software Half-Life 1.1 .0.4 Linux Valve Software Half-Life Dedicated Server 3.1 .0.4 Linux + Valve Software Half-Life 1.1 .0.4 Linux Valve Software Half-Life 1.1.1 .0 Valve Software Half-Life 1.1 .0.9 Valve Software Half-Life 1.1 .0.8 - Microsoft Windows 98 SP1 - Microsoft Windows 98 b - Microsoft Windows 98 a - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Valve Software Half-Life 1.1 .0.4 Windows - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 Valve Software Half-Life 1.1 .0.4 Linux - Caldera OpenLinux 2.4 - Debian Linux 2.2 - MandrakeSoft Linux Mandrake 7.2 - MandrakeSoft Linux Mandrake 7.1 - MandrakeSoft Linux Mandrake 7.0 - RedHat Linux 7.0 i386 - RedHat Linux 6.2 i386 - S.u.S.E. Linux 7.0 - S.u.S.E. Linux 6.4 - SCO eDesktop 2.4 - SCO eServer 2.3.1
Not Vulnerable:	Valve Software Half-Life Dedicated Server 4.1.1 .1d Beta Win32 Valve Software Half-Life Dedicated Server 4.1.1 .1c1 Win32