Re: [hlcoders] Bugtraq: hl exploits

2003-01-10 Thread botman
Bugtraq (a security related mailing list) just posted 3 advisories concerning Half-Life (HLTV, ClanMod, Adminmod). I highly recommend to any coder and/or sysadmin to check these out (I'm not going to reproduce them here, bugtraq has an excellent archive). Although there's no fix available

Re: [hlcoders] Bugtraq: hl exploits

2003-01-10 Thread Sebastian Steinlechner
Hallo, Friday, January 10, 2003, 20:44, botman [EMAIL PROTECTED] wrote: Thanks botman, I was unsure whether it would be a good idea to post the urls here, so you decided it for me... http://online.securityfocus.com/archive/1/306120/2003-01-07/2003-01-13/0 Actually, this advisory isn't

Re: [hlcoders] Creating a persistant statistic database?

2003-01-10 Thread jc
i really hope they are still working on it; i just added the test version to my mod Valve if u r listening... plz finsih VPP... please! jc - Original Message - From: JR [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, January 10, 2003 2:31 AM Subject: Re: [hlcoders] Creating a

Re: [hlcoders] Bugtraq: hl exploits

2003-01-10 Thread Pat Magnan
At 01:44 PM 1/10/2003 -0600, you wrote: Bugtraq (a security related mailing list) just posted 3 advisories concerning Half-Life (HLTV, ClanMod, Adminmod). I highly recommend to any coder and/or sysadmin to check these out (I'm not going to reproduce them here, bugtraq has an excellent

Re: [hlcoders] Bugtraq: hl exploits

2003-01-10 Thread Jussi Kivilinna
On Fri, 10 Jan 2003, Pat Magnan wrote: The good news is that the potential seems limited for those not running their servers as root, in the case of the clanmod one. We are getting fixed clanmod binaries out really soon. .- Jussi Kivilinna [EMAIL PROTECTED]

Re: [hlcoders] Bugtraq: hl exploits

2003-01-10 Thread Cortex
Sebastian Steinlechner wrote: Actually, this advisory isn't researched to the end. The main problem lies in cl_dll's text_message.cpp. Looking at CHudTextMessage::MsgFunc_TextMsg() it's clear to see that there are MANY potential buffer overflows. e.g., READ_STRING is able to return a char

Re: [hlcoders] Bugtraq: hl exploits

2003-01-10 Thread Pat Magnan
I'll try, i've just been reading my first book about how this works. I'm a somewhat junior programmer so my understanding is somewhat lacking. I believe that it is possible because of the way things are represented in memory, when you're taking in input from a user, so something like this: void

Re: [hlcoders] Bugtraq: hl exploits

2003-01-10 Thread Pat Magnan
At 09:26 PM 1/10/2003 +0100, you wrote: Well, explain it only if it can't give enough info about making hack for HL Sorry, one more point. If we as programmers don't understand what hackers do, how can we write secure code? :D. We should never be afraid to understand how they work, such