Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Valve Software Half-Life Dedicated Server Information Disclosure/DOS Vulnerability

Half-Life dedicated server has been reported prone to an information disclosure vulnerability. This issue may also be exploited to deny service to legitimate users of the Half-Life dedicated server.

The issue presents itself due to a flaw in download functionality that is provided by the Half-Life dedicated server. It has been reported that a malicious attacker may exploit this functionality to download any file from the root folder of the current running game type, or from the valve folder.







 

Privacy Statement
Copyright 2009, SecurityFocus