CVE-2003-1381

Amxmod.net Amx Mod - Format String Vulnerability

Title source: rule

Description

Format string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life Server, allows remote attackers to execute arbitrary commands via format string specifiers in the amx_say command.

Exploits (1)

exploitdb WORKING POC VERIFIED

by greuff · cremotelinux

https://www.exploit-db.com/exploits/22291

View Code ZIP pw:eip

References (4)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/6968

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/11427

[Third Party Advisory] http://securityreason.com/securityalert/3258

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/313273

Scores

EPSS 0.0398

EPSS Percentile 88.4%

Details

CWE

CWE-134

Status published

Products (1)

amxmod.net/amx_mod 0.9.2

Published Dec 31, 2003

Tracked Since Feb 18, 2026