Unrated severityNVD Advisory· Published Dec 19, 2000· Updated Jun 16, 2026

CVE-2000-0969

Description

Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon.

Affected products

Valve Software/Half Life Dedicated Server
cpe:2.3:a:valve_software:half-life_dedicated_server:3.1.3:*:*:*:*:*:*:*
Half Life/dedicated serverllm-create
Range: <=3104

Patches

Vulnerability mechanics

References

archives.neohapsis.com/archives/bugtraq/2000-10/0254.htmlnvd
archives.neohapsis.com/archives/bugtraq/2000-10/0409.htmlnvd
www.osvdb.org/6983nvd
www.securityfocus.com/archive/1/141060nvd
exchange.xforce.ibmcloud.com/vulnerabilities/5413nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000