CounterStrike (HalfLife?) Server possible DoS attack.

Hi Guys,

Could someone who actually has CounterStrike on their PC look into this for me and see if it still exists?
Last I remember, it was possible to crash a CS server and thus disconnect all users by requesting "say nextmap" multiple times. To reproduce this attack, you simply bind any key to ask the server to display the next map - I recall it as 'say nextmap'. So, for example;

F6 = 'say nextmap; say nextmap; say nextmap; say nextmap; say nextmap; say nextmap; say nextmap; say nextmap; say nextmap; say nextmap; say nextmap'

Connect to a server, and rapidly press F6 until you are disconnected. Try and reconnect - the service should have crashed.

Thanks,

Patrick Webster,
Systems Administrator

DeMorgan Information Security Services

Freecall: 1800 DE MO RG (33 66 74)

Tel: +61299290377
Fax: +61299290917
Mob: +61403421390

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Address: Level 2, 41 McLaren St
North Sydney, NSW, 2060, Australia

Visit us at: www.demorgan.com.au

 This correspondence is for the named person's use only. It may  contain confidential or legally privileged information or both.  No confidentiality or privilege is waived or lost by any  mistransmission. If you receive this correspondence in error, please  immediately delete it from your system and notify the sender. You  must not disclose, copy or rely on any part of this correspondence  if you are not the intended recipient.  

 Any views expressed in this message are those of the individual sender,  except where the sender expressly, and with authority, states them to  be the views of DeMorgan Pty Ltd.  

 This e-mail has been checked for known Viruses. It is the responsibility  of the receiver to check their system for infected files and any such  file is deemed not to be the responsibility of DeMorgan.