CVEvulnerability

CVE-2000-0969

10.0 HIGH Published 2000-12-19 Modified 2026-09-23 Official page ↗
Status
Modified
Published
2000-12-19
Last modified
2026-09-23
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon.

Affected configurations

• valve software half-life dedicated server 3.1.3

References