PT-2002-1973 · Valve · Half-Life Server

Published 2002-10-04 · Updated 2008-09-05 · CVE-2002-0964

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Half-Life Server versions 1.1.1.0 and earlier

Description: The issue allows remote attackers to cause a denial of service, specifically resource exhaustion, by sending multiple responses to the initial challenge with different cd key values. This action reaches the player limit, preventing other players from connecting until the original responses have timed out.

Recommendations: For Half-Life Server versions 1.1.1.0 and earlier, consider restricting the number of responses to the initial challenge to prevent reaching the player limit, or implement a mechanism to handle multiple responses with different cd key values without causing resource exhaustion.

Exploit

Fix

Related Identifiers

CVE-2002-0964

Affected Products

Half-Life Server

References · 5

• 🔥 https://exploit-db.com/exploits/21572 · Exploit
• http://iss.net/security_center/static/9412.php · Vendor Advisory
• http://securityfocus.com/bid/5076 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0964 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-06/0248.html · Note