HLDS server exploit

Post by **Edge100x** » Wed Jul 30, 2003 8:25 am

An exploit was released yesterday by a security group that can be used to crash any Half-life server. Unfortunately, when it crashes the server, it forces the server to use 100% CPU usage, thereby lagging other servers on its machine and making it very difficult for us to administrate the machine.

In addition, with the techniques used in the exploit, it may be possible for an attacker to remotely execute his/her code on our machines -- something we must avoid at all costs.

I have taken down all Half-life servers at this point while we wait for Valve to release a patch. Eric Smith from Valve says they are working on one and it should be put out today, so I expect all servers to be back to normal tonight.

Update, 5:49pm PST: Valve has released a patch which we have applied to all servers. Everything is now upgraded and back to normal.