What version of ES and ESTools are you using?

What actual ES scripts do you run there?

(ES stuff is all I can help with)

There are a few older bugs that might have caused the crash: ns about the 
refusal to start back up though! (are you sure the srcds_run batch script is 
dead too and that a ghost server is not hogging the IP/Port)

Tom

--------------------------------------------------
From: "Tom Leighton" <[EMAIL PROTECTED]>
Sent: Friday, July 11, 2008 10:39 PM
To: "Half-Life dedicated Win32 server mailing list" 
<[email protected]>
Subject: Re: [hlds] Possible CS:S server exploit?

> Have you tried removing all Eventscripts? It seems that it loads one and
> then starts to shutdown.
>
> Ryan wrote:
>> The percentage thing is totally normal, I have not completed an update
>> in the last year or so that ended at an actual 100%.
>>
>> On Fri, Jul 11, 2008 at 3:55 PM, Matt D <[EMAIL PROTECTED]> wrote:
>>
>>> I run a CSS surfing server (on windows server 2003) with mani admin (via
>>> sourceMM) and eventscripts (and the es_tools addon) along with many 
>>> custom
>>> eventscripts. Last night my server mysteriously crashed and would not 
>>> start
>>> back up. I spoke with one of the players who was in my server at the 
>>> time,
>>> and someone allegedly said they were going to crash it; shortly after 
>>> the
>>> server went down. It now refuses to start back up, and the final console
>>> lines in this screen shot are what it says before crashing and then
>>> attempting to restart via my keepalive batch script:
>>>
>>> http://img388.imageshack.us/img388/364/46784441qg3.jpg
>>>
>>> I know these errors have been seen before (via google searches), but 
>>> what
>>> really intrigues me is what followed. Thinking I may have a bad memory 
>>> stick
>>> I copied the entire srcds directory to another computer hoping it might
>>> work, but the exact same thing happens. Then just for kicks I decide to 
>>> try
>>> running the hldsupdatetool, first of all it turns out I was not running 
>>> the
>>> most recent version of the srcds, so it attempts to update it (I'm 
>>> thinking
>>> that may have been part of the problem). It begins to update, but what I
>>> find odd is that the percentages are above 100%, quite far past 100% in 
>>> some
>>> cases; I cannot remember the exact numbers here but it was quite large. 
>>> Now
>>> I am very perplexed as to what the problem might be, so I decided to run 
>>> the
>>> updater again, but this time specify the -verify_all flag. I caught the
>>> percentages this time, and it starts verifying at 0.00% and stays there 
>>> for
>>> a while, then abruptly jumps to 154300.00% and then finishes at
>>> 348441500.00%, after completion reporting my hlds installation is up to
>>> date. It would appear that something has been seriously compromised 
>>> and/or
>>> corrupted within my srcds installation somewhere, but I am not sure 
>>> exactly
>>> what.
>>>
>>> What leads me to believe that this was an intentional act of malice is 
>>> that
>>> my server was running just fine for weeks prior to this incident, then 
>>> last
>>> night without me changing anything, my server is totally broken. I am
>>> currently in the process of starting with a fresh install and porting 
>>> all my
>>> settings over to the new installation (as well as updating a few of the
>>> plugins which I now know were outdated versions, perhaps this will help 
>>> in
>>> the future too) hoping to fix things.
>>>
>>> I am really just wondering though if anyone has heard of anything like 
>>> this
>>> before, or is aware of any known exploits or vulnerabilities which 
>>> exist/may
>>> have existed in older versions of the srcds. I am trying my fresh 
>>> install on
>>> version 95 which I believe is the most recent version.
>>> _______________________________________________
>>> To unsubscribe, edit your list preferences, or view the list archives, 
>>> please visit:
>>> http://list.valvesoftware.com/mailman/listinfo/hlds
>>>
>>>
>>
>> _______________________________________________
>> To unsubscribe, edit your list preferences, or view the list archives, 
>> please visit:
>> http://list.valvesoftware.com/mailman/listinfo/hlds
>>
>>
>
> _______________________________________________
> To unsubscribe, edit your list preferences, or view the list archives, 
> please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds 


_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds

Reply via email to