CVE-2000-0969

Published: Dec 19, 2000Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon.

Affected (1)

Products: Valve Software: Half Life Dedicated Server

Valve Software

1 product

Half Life Dedicated Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Valve Software Half Life Dedicated Server	Version 3.1.3

References (10)

http://archives.neohapsis.com/archives/bugtraq/2000-10/0254.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2000-10/0409.html

Source: cve@mitre.org

http://www.osvdb.org/6983

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/141060

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/5413

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2000-10/0254.html