vulnerability exploit

Issues regarding [!!!]Hirntot, 6 Map Standard Gameserver
Image
[!!!]Hirntot Server Player Stats
Forum rules
This is an international forum. PLEASE speak ENGLISH! If you have problems with english, please try to post in english and repeat the post in your motherlanguage.
Locked
eeben
Posts: 8
Joined: Sat Aug 25, 2018 8:42 am

vulnerability exploit

Post by eeben » Sat Sep 14, 2019 8:04 am

There is a vulnerability on server. [link removed] fix is please. Linux still have good serstaring when crash happens. :geek:

User avatar
a domestic cat
Posts: 33
Joined: Mon Nov 05, 2018 1:06 pm
Location: Wild East

Re: vulnerability exploit

Post by a domestic cat » Sat Sep 14, 2019 10:17 am

This is known and also patched bug.
<sCript>why i eyez ya<ScRipt/>

eeben
Posts: 8
Joined: Sat Aug 25, 2018 8:42 am

Re: vulnerability exploit

Post by eeben » Sat Sep 14, 2019 10:58 am

no its not. when server is empty and you type /readyteams and join ans type /teamfollow2 to team whole server crash.

c0rnn
[!!!]
Posts: 207
Joined: Sun Aug 19, 2018 9:44 am

Re: vulnerability exploit

Post by c0rnn » Sat Sep 14, 2019 11:01 am

It's been fixed years ago.

User avatar
a domestic cat
Posts: 33
Joined: Mon Nov 05, 2018 1:06 pm
Location: Wild East

Re: vulnerability exploit

Post by a domestic cat » Sat Sep 14, 2019 11:05 am

Both /readyteams nor /teamfollow2 are not valid commands (but I get what you meant by that). Installed globalcombined.lua limits team command argument to be r, b or s, nothing else. As all Hirntot servers use that Lua module, they're not vulnerable.
<sCript>why i eyez ya<ScRipt/>

eeben
Posts: 8
Joined: Sat Aug 25, 2018 8:42 am

Re: vulnerability exploit

Post by eeben » Sat Sep 14, 2019 11:06 am

I teester it on the morning and server restarted. :|

eeben
Posts: 8
Joined: Sat Aug 25, 2018 8:42 am

Re: vulnerability exploit

Post by eeben » Sat Sep 14, 2019 11:15 am

You must be alone on the server its not working otherwise. Trust me it crashes.

User avatar
a domestic cat
Posts: 33
Joined: Mon Nov 05, 2018 1:06 pm
Location: Wild East

Re: vulnerability exploit

Post by a domestic cat » Sat Sep 14, 2019 11:17 am

EDIT: I'm still not able to reproduce.
<sCript>why i eyez ya<ScRipt/>

eeben
Posts: 8
Joined: Sat Aug 25, 2018 8:42 am

Re: vulnerability exploit

Post by eeben » Sat Sep 14, 2019 11:26 am

dID U SEE?

Locked