Here is a possible patch for the new found exploit. It hasn't been fully tested yet though since I am only speculating on how this exploit is being performed.
This plug-in will output a log event every time someone requests a file from the server, whether it be a spray logo file or your server.cfg. http://forums.alliedmods.net/showthread.php?p=992047 -----Original Message----- From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Ronny Schedel Sent: Tuesday, November 17, 2009 2:06 AM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] Its the law! Under which conditions? ----- Original Message ----- From: "1nsane" <1nsane...@gmail.com> To: "Half-Life dedicated Win32 server mailing list" <hlds@list.valvesoftware.com> Sent: Tuesday, November 17, 2009 12:31 AM Subject: Re: [hlds] Its the law! Under certain conditions It is possible to download files from the server. Server.cfg being a good one. Also the reverse is true. On Mon, Nov 16, 2009 at 5:37 PM, JäKë T <can_kic...@hotmail.com> wrote: > > It's just cracking rcon password, then they set it to private and change > the name. > So just having rcon locker and a nice password fixes it. > > > > From: i...@ronny-schedel.de > > To: hlds@list.valvesoftware.com > > Date: Mon, 16 Nov 2009 23:32:24 +0100 > > Subject: Re: [hlds] Its the law! > > > > The big question is: how is it done? Let's hope there is backdoor in the > > fake player app and not a bug in the server code. > > > > > http://img692.imageshack.us/img692/4728/71956486.jpg > > > I lay money on Lotusclan getting there comeuppance! > > > > > > > > > > > > _______________________________________________ > > > To unsubscribe, edit your list preferences, or view the list archives, > > > please visit: > > > http://list.valvesoftware.com/mailman/listinfo/hlds > > > > > > > > > _______________________________________________ > > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > > http://list.valvesoftware.com/mailman/listinfo/hlds > > _________________________________________________________________ > Windows Live: Make it easier for your friends to see what youre up to on > Facebook. > http://go.microsoft.com/?linkid=9691816 > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds > _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
