[blaacky]

Using the spec_goto command, players can crash servers by inputting impossible values. It's fixed by this plugin

[xines]

Holy, nice find! Gonna block the whole cmd myself to be sure for now!

[catdevnullwhoami]

Hello Guys! Are you ok?

What kind commands for example?

How can i test this malicious commands on my server?

Thanks

[shavit]

Originally Posted by catdevnullwhoami Hello Guys! Are you ok? What kind commands for example? How can i test this malicious commands on my server? Thanks

wild guess:

spec_goto 10000000000 10000000000 10000000000 0 0

or

spec_goto 10000000000 10000000000 10000000000 10000000000 10000000000

(untested, no idea how this command works to begin with)

*hopefully won't be used to crash servers*

[blaquicat]

It does works on l4d2, just tested, spec_goto could crash my server, not anymore, thanks!!

[albertj12b]

FYI 100% work for Lewd4Dead servers in LFD2 but might be obsolete for the game:

March 27, 2019 - L4D Team An update has been released for Left 4 Dead 2. - Fixed a spectate command exploit that caused servers to hang. - Fixed lobby chat messages not appearing on Linux.

http://www.l4d.com/blog/

Apparent exact minimum command needed to have trigger buffer overflow:

spec_goto 0 0 274877923328.1 0 0

Someone wrote about it here but never expanded on the malform parameters bit which may still keep alternative spec_goto fixes relevent:

spec_goto: How to instantly crash any L4D2 server (and how Admins can patch it)
https://steamcommunity.com/sharedfil.../?id=652991759

Keeping plugin installed regardless, ta.

[JLmelenchon]

Apparently this is not the only secret command that crash server, it start happening again with the exact same behaviour.