Half-Life Vulnerabilities Exposed, Patched

Posted by simoniker on Thursday July 31, 2003 @04:15AM from the publicized-then-fixed dept.

AEton writes "PivX Solutions revealed in a press release three apparently new vulnerabilities in Half-Life and its related mods (such as Counter-Strike and Day of Defeat). Security researcher Auriemma Luigi discovered the flaws, reported them to Valve, and waited over three months for an official response before releasing an unofficial patch to correct the issues. Details on each of the vulnerabilities and sample code are linked to in the press release. (The third one looks kind of flaky, but the buffer overflows seem real.)" Thanks to an anonymous reader for pointing out Valve have now released a dedicated Windows server patch and dedicated Linux server patch (links via Fileshack) which seem to fix the issues.

2 of 36 comments (clear)

Min score:

Reason:

Sort:

Re:3 months by kmak · 2003-07-31 04:55 · Score: 2, Informative

Anything made by Blizzard is constantly patched.. they still release updates/patches to Starcraft!

--

I'm not the devil.. just his advocate.
Want a HL2 Client then sign this by Anonymous Coward · 2003-07-31 04:59 · Score: 2, Informative

If you want a HL2 Client for Linux then sign this petition, the more signatures the better the odds, there are already 4500 signatures. Add you name to it.