Secunia

Multiple vulnerabilities has been identified in Half-Life possibly allowing malicious people to gain system access.

Half-Life Server:

1) The problem is that certain parameters in the packet used to join a game isn't verfied by the server. This allows a malicious client to cause a buffer overflow which could possibly be exploited to execute arbitrary code.

2) It is possible to cause the server to enter an infinite loop by sending a 380 character long value to the server. This causes a Denial of Service.

Half-Life Client:

1) A malicious server may cause a buffer overflow in the client due to lack of verification of input in the connection routine. This could be exploited to execute arbitrary code.

Furthermore users of the Half-Life client should be aware that Half-Life modules may include DLL files, these could possibly contain malicious code. Even if a module does not contain DLL files the module could still cause a buffer overflow which could be exploited to execute arbitrary code.

Exploit code does exist.

Solution
No update is available.
Further details available in Customer Area

Provided and/or discovered by
Auriemma Luigi, PivX Solutions

Original Advisory
http://www.pivx.com/luigi/adv/hlbof-server-adv.txt
http://www.pivx.com/luigi/adv/hlbof-client-adv.txt

Deep Links
Links available in Customer Area