Raised This Month: $ Target: $400
 0% 

D-FENS - Patch for upload/download server file exploit. (Updated 05-10-2010)


Post New Thread Reply   
 
Thread Tools Display Modes
blissend
Member
Join Date: Mar 2008
Old 12-01-2009 , 12:03   Re: D-FENS - Emergency patch against downloading server files. (Updated 11-29-2009)
Reply With Quote #41

Happy to see that someone has provided a fix. I just wish it were provided for the stable version of metamod rather than the beta version and I hope there isn't joke about it not being as stable as the beta.
blissend is offline
FuhrerMike
Member
Join Date: Dec 2007
Old 12-01-2009 , 19:03   Re: D-FENS - Emergency patch against downloading server files. (Updated 11-29-2009)
Reply With Quote #42

Thanks for this plugin, this exploit is easily one of the worst and most careless on Valve's part for not fixing it IMMEDIATELY.

Is there any way Valve would take action against someone who used this and was caught by the plugin? I caught one red-handed today and would like to report if possible.
FuhrerMike is offline
voogru
Inspector Javert
Join Date: Oct 2004
Old 12-02-2009 , 00:32   Re: D-FENS - Emergency patch against downloading server files. (Updated 11-29-2009)
Reply With Quote #43

Quote:
Originally Posted by FuhrerMike View Post
Thanks for this plugin, this exploit is easily one of the worst and most careless on Valve's part for not fixing it IMMEDIATELY.

Is there any way Valve would take action against someone who used this and was caught by the plugin? I caught one red-handed today and would like to report if possible.
No, but we as server administrators could share the id's of offenders and ban them ourselves.
voogru is offline
DontWannaName
Veteran Member
Join Date: Jun 2007
Location: VALVe Land, WA
Old 12-02-2009 , 03:52   Re: D-FENS - Emergency patch against downloading server files. (Updated 11-29-2009)
Reply With Quote #44

If there is another version coming out then logging everything to its own log file would make it a lot easier to search for players who tried it.
__________________

DontWannaName is offline
API
Veteran Member
Join Date: May 2006
Old 12-02-2009 , 04:51   Re: D-FENS - Emergency patch against downloading server files. (Updated 11-29-2009)
Reply With Quote #45

Thank you so much for this patch. I just got targeted, now to hope that these assholes haven't put anything on my ****ing computer.
__________________
API is offline
Send a message via AIM to API
voogru
Inspector Javert
Join Date: Oct 2004
Old 12-02-2009 , 13:54   Re: D-FENS - Emergency patch against downloading server files. (Updated 11-29-2009)
Reply With Quote #46

Quote:
Originally Posted by DontWannaName View Post
If there is another version coming out then logging everything to its own log file would make it a lot easier to search for players who tried it.
I just use grep "illegal file" *.log.
voogru is offline
egor1908
Veteran Member
Join Date: Sep 2009
Old 12-02-2009 , 16:48   Re: D-FENS - Emergency patch against downloading server files. (Updated 11-29-2009)
Reply With Quote #47

Any binary for L4D-2 soon?
egor1908 is offline
voogru
Inspector Javert
Join Date: Oct 2004
Old 12-02-2009 , 17:09   Re: D-FENS - Emergency patch against downloading server files. (Updated 11-29-2009)
Reply With Quote #48

Quote:
Originally Posted by egor1908 View Post
Any binary for L4D-2 soon?
Should be one in the file...
voogru is offline
egor1908
Veteran Member
Join Date: Sep 2009
Old 12-02-2009 , 17:20   Re: D-FENS - Emergency patch against downloading server files. (Updated 11-29-2009)
Reply With Quote #49

Quote:
Originally Posted by voogru View Post
Should be one in the file...
Sorry, forgot to say, it's the Linux one i am lookin' after.

And, ehm, how can i make this plugin to log in a separate file?


Quote:
Originally Posted by devicenull View Post
left4dead binary

f105dba8188dc7602e7ba4af26b9fe7b dfens_mm_i486.so
i cant get it to run on my L4D-1 server.

Quote:
meta load addons/D-FENS/bin/dfens_mm_i486_l4d.so

Failed to load plugin addons/D-FENS/bin/dfens_mm_i486_l4d.so (/usr/local/games/~/l4d/left4dead/addons/D-FENS/bin/dfens_mm_i486_l4d.so: undefined symbol: _Unwind_Resume).

Last edited by egor1908; 12-02-2009 at 18:12.
egor1908 is offline
KyleS
SourceMod Plugin Approver
Join Date: Jul 2009
Location: Segmentation Fault.
Old 12-02-2009 , 23:56   Re: D-FENS - Emergency patch against downloading server files. (Updated 11-29-2009)
Reply With Quote #50

Any chance at getting DeviceNull to recompile the Linux plugin with your new fixes?
KyleS is offline
Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 19:06.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode