Description
Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon.
References
- halflife-rcon-format-string(5413) vdb-entry
- 20001024 Tamandua Sekure Labs Security Advisory 2000-01 mailing-list
- 20001016 Half-Life Dedicated Server Vulnerability mailing-list
- 6983 vdb-entry
- 20001027 Re: Half Life dedicated server Patch mailing-list