Vulnerability CVE-2003-1325
Published: 2003-12-31   Modified: 2012-02-12

Description:
The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) via a certain connection string to UDP port 27015 that represents "absence of player informations," a related issue to CVE-2006-0734.

CVSS2 => (AV:A/AC:M/Au:S/C:N/I:N/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5.2/10
6.9/10
4.4/10
Exploit range
Attack complexity
Authentication
Adjacent network
Medium
Single time
Confidentiality impact
Integrity impact
Availability impact
None
None
Complete
Affected software
Valve software -> Half-life cstrike dedicated server 

 References:
http://packetstormsecurity.org/0304-exploits/hl-headnut.c
http://aluigi.altervista.org/adv/csdos.txt
Copyright 2024, cxsecurity.com

 

Back to Top