CounterStrike (HalfLife?) Server possible DoS attack.

From: Patrick Webster (webster_pat_private)
Date: Wed Nov 27 2002 - 16:12:24 PST

  • Next message: r00t: "Re: CounterStrike (HalfLife?) Server possible DoS attack."

    Hi Guys,
    
    Could someone who actually has CounterStrike on their PC look into this for
    me and see if it still exists?
    Last I remember, it was possible to crash a CS server and thus disconnect
    all users by requesting "say nextmap" multiple times.
    To reproduce this attack, you simply bind any key to ask the server to
    display the next map - I recall it as 'say nextmap'.
    So, for example;
    
    F6 = 'say nextmap; say nextmap; say nextmap; say nextmap; say nextmap; say
    nextmap; say nextmap; say nextmap; say nextmap; say nextmap; say nextmap'
    
    Connect to a server, and rapidly press F6 until you are disconnected. Try
    and reconnect - the service should have crashed.
    
    Thanks,
    
    Patrick Webster,
    Systems Administrator
    
    DeMorgan Information Security Services
    
    Freecall: 1800 DE MO RG (33 66 74)
    Tel: +61299290377
    Fax: +61299290917
    Mob: +61403421390
    
    Address: Level 2, 41 McLaren St
    North Sydney, NSW, 2060, Australia
    
    Visit us at: www.demorgan.com.au
    
    ----------------------------------------------------
    
     This correspondence is for the named person's use only.  It may
     contain confidential or legally privileged information or both.
     No confidentiality or privilege is waived or lost by any
     mistransmission.  If you receive this correspondence in error, please
     immediately delete it from your system and notify the sender.  You
     must not disclose, copy or rely on any part of this correspondence
     if you are not the intended recipient.
     
     Any views expressed in this message are those of the individual sender,
     except where the sender expressly, and with authority, states them to
     be the views of DeMorgan Pty Ltd.
     
     This e-mail has been checked for known Viruses. It is the responsibility
     of the receiver to check their system for infected files and any such
     file is deemed not to be the responsibility of DeMorgan.
    
    ---------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Sat Nov 30 2002 - 12:27:19 PST