Vulnerabilities > CVE-2003-1325 - Denial-Of-Service vulnerability in Half-Life Cstrike Dedicated Server

047910
CVSS 5.2 - MEDIUM
Attack vector
ADJACENT_NETWORK
Attack complexity
MEDIUM
Privileges required
SINGLE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
COMPLETE
valve-software
exploit available

Summary

The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) via a certain connection string to UDP port 27015 that represents "absence of player informations," a related issue to CVE-2006-0734.

Vulnerable Configurations

Part Description Count
Application
Valve_Software
1

Exploit-Db

descriptionHalf-Life CSTRIKE Server. CVE-2003-1325,CVE-2006-0734. Dos exploits for multiple platform
idEDB-ID:1483
last seen2016-01-31
modified2006-02-11
published2006-02-11
reporterFirestorm
sourcehttps://www.exploit-db.com/download/1483/
titleHalf-Life CSTRIKE Server <= 1.6 Non Steam - Denial of Service Exploit