Your Name wrote:
One of my regulars pointed out someone doing something fishy on a server today and the idiot actually talked enough about it that I could track it down.
If he was telling you the truth of course.
http://www.gotfrag.com/dod/forums/thread/147822/
Remember, forums are populated by people who will speak before thinking.
Basically it looks like they execute this command string and they get the run of the server. "Well do the following bind "p" "changeclass; wait; jointeam 4" enjoy!"
Could be an overflow of some kind here, but this shouldn't provide rcon access or anything like that. The server itself should still be in a stable state unless this really breaks something. > [snip random quotes]
The log entries look like this every time the guy did it: L 08/13/2005 - 21:42:27: "roflcakes<10><STEAM_0:0:2112501><Allies>" committed suicide with "world" L 08/13/2005 - 21:42:27: "roflcakes<10><STEAM_0:0:2112501><Allies>" joined team "0%¾ $¾Ð|¾aÚÆexec %s.cfg "
Ah, now this is more interesting. I see a call to an exec %s.cfg amoung other things hidden in special charecters. Unless changeclass or jointeam are poorly coded enough (and the only way I would imagine it could go this wrong is by time-line code failure) I see no way that the description above links to this log extract without at least some more commands. _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
