|
|
Info |
Last Modified |
| 8 months ago |
|
|
|
|
Description |
Half-life dedicated server contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the "allowdownload" option is enabled, which will allow access to any file in the "valve" directory resulting in a loss of confidentiality. In the event a large file is downloaded from the server a Denial of Service could occur.
|
|
Classification |
Unknown or Incomplete
|
|
Solution |
Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround(s): Set "allowdownloads" to "0" in the config file. However setting this option stops users from being able to download maps from the server.
|
|
Products |
|
Half-Life Dedicated Server
 |
0.x |
1.x |
3.x |
4.x |
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
