CVE-2003-1381: Format string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life Server, allow...

Security readout for executives and security teams

This is an old remote command execution issue in AMX, a Half-Life server plugin. Servers running AMX 0.9.2 or earlier could be compromised through unsafe handling of formatted text in the plugin’s say functionality. It matters mainly for organizations still operating legacy Half-Life servers or archived game-hosting environments. Exposure is likely limited to legacy Half-Life servers running AMX 0.9.2 or earlier. Modern systems are unlikely affected unless they retain old game-server images, community servers, or archived hosting stacks. Treat this as urgent only if legacy Half-Life servers are still operated or exposed. Otherwise, handle through legacy asset cleanup and vulnerability hygiene rather than emergency response. Mitigation focus: Inventory Half-Life servers and identify installed AMX plugin versions.; Remove or isolate AMX 0.9.2 and earlier from exposed servers.; Check archived AMX or vendor guidance for a fixed release path..

Prepared

Jun 29, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.