CVE-2000-0969 Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the...
HighCVSS 10.0
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| valve software half-life dedicated server | = 3.1.3 | No fix listed |
References
- halflife-rcon-format-string(5413) vdb-entry
- 20001024 Tamandua Sekure Labs Security Advisory 2000-01 mailing-list
- 20001016 Half-Life Dedicated Server Vulnerability mailing-list
- 6983 vdb-entry
- 20001027 Re: Half Life dedicated server Patch mailing-list