Security Incidents mailing list archives

Re: Probes on UDP port 27015


From: Jeff <jeff () TCNET ORG>
Date: Tue, 26 Dec 2000 15:51:58 -0500

On Tue, 26 Dec 2000, Jeff wrote:


27015 is the default port number for various Sierra Online/Valve
multi-player online games -- "Halflife", among others.
[snip]

Your probes on 27015/udp are most likely game locator servers or clients,
or the game client itself looking for servers or requesting information
regarding servers past or present.

[yes, yes, replying to my own post, bad form]

I completely forgot to mention the fact that there has been at least one
well-published exploit for a Half-Life "dedicated" server package.

2000-10-16 Valve Software Half-Life Dedicated Server 3.1.0.3 & Previous
<URI:http://www.securityfocus.com/bid/1799>
<URI:http://www.securityportal.com/research/exploits/linux/20001024-linux-halflife.txt>

My apologies for the omission.

-jeff

--
Jeff Godin
Network Specialist
Traverse Area District Library / Traverse Community Network
jeff () tcnet org


Current thread: