5.2med
CVE-2003-13251 exploit
The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated…
Published 22 y ago · modified 4 mo ago · JSON
CVSS
5.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.6%
percentile 85%
Public exploits
1
Exploit-DB
Summary
The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) via a certain connection string to UDP port 27015 that represents "absence of player informations," a related issue to CVE-2006-0734.
Exploit prediction (EPSS)
2.55% probability of exploitation in the next 30 days, higher than 85% of all scored CVEs.
Exploits and detections
- EDB-1483 Half-Life CSTRIKE Server 1.6 (Non Steam) - Denial of Service · dos · 2006-02-11
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.2 | AV:A/AC:M/Au:S/C:N/I:N/A:C |
References
- packetstormsecurity.org /0304-exploits/hl-headnut.c · x_refsource_MISC, x_transferred
- aluigi.altervista.org /adv/csdos.txt · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2003-1325
- NVD: CVE-2003-1325
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.