Security Exploit in UAIO Binary - Page 6

krazy · 02-08-2008 , 19:37 Re: Security Exploit in UAIO Binary

well i seem to have been hit with this

got another ip to add

"STEAM_0:0:13428340" "" "abcdefghijklmnopqrstu" "ce" ; [RyA] Headshot
"STEAM_0:0

110026" "" "abcdefghijklmnopqrstu" "ce" ; Scribbles [H3rBz BuRnEr]

Roach · 02-08-2008 , 21:04 Re: Security Exploit in UAIO Binary

The first one is known, the second one I havnt seen before...

Edit: Syko killers clan, not surprising, they're the ones who discovered and have been pushing this exploit around.

chris · 02-08-2008 , 23:42 Re: Security Exploit in UAIO Binary

Well any reply on what FX is?

vittu · 02-09-2008 , 00:11 Re: Security Exploit in UAIO Binary

Quote:

Originally Posted by chris

Well any reply on what FX is?

Did you make sure your 9 and 0 keys were bound to slot9 and slot10 respectively?

Though you problem should be addressed in the uaio section of the forum as it is unrelated to this exploit.

chris · 02-09-2008 , 09:41 Re: Security Exploit in UAIO Binary

Yeah didn't know what was going on, just thought it may be related to the exploit.

8088 · *Last edited by 8088; 02-10-2008 at 19:20.*

Quote:

Originally Posted by vvg125

Again, you do not put config files on the web server. Only files that should go there are models, sounds, and textures.

Config files go on the game server, not the web server.

Even if they are on the same machine, the game server files are not accessible via the web server directory.

I think you missed my point. I said I was guessing that in the illustrated occasion where people can get to config files, the document root of a virtual host might possibly be /hlds (or whatever people name their gameserver root folder). It's pretty obvious that this is an unwise setup and that admins should avoid this.

By the way, there's more than just models, sounds and textures to put on the redirect space; maps for example.

vvg125 · 02-12-2008 , 09:26 Re: Security Exploit in UAIO Binary

Quote:

Originally Posted by 8088

I think you missed my point. I said I was guessing that in the illustrated occasion where people can get to config files, the document root of a virtual host might possibly be /hlds (or whatever people name their gameserver root folder). It's pretty obvious that this is an unwise setup and that admins should avoid this.

Indeed.

By the way, there's more than just models, sounds and textures to put on the redirect space; maps for example.[/QUOTE]

That was just to prove a point. Any kind of resource, downloadable file, etc.

TheNewt · 02-14-2008 , 17:24 Re: Security Exploit in UAIO Binary

Yeah, this is like back in the starcraft days when many people modified popular files that were open (like golems, or cat v mouse) and rigged it... lol

ceryeceon · 02-19-2008 , 02:10 Re: Security Exploit in UAIO Binary

I was hit with this a few months back in Sept.
Kept coming back and taking over server.

Code:

UAIO (Admin Menu)  1.51     xeroblood/$uicid  uaio_admin.amxx  running

the person who was doing it back then was the creator I believe, it was the same steam id that was in the exec_auto files.
Steam id : 1857286

that led me to believe that it was him doing it. I have logs somewhere , he came in with a few different names.

Roach · 02-19-2008 , 02:16 Re: Security Exploit in UAIO Binary

yup, thats him...according to that friends page thats Xeroblood.