Raised This Month: $276 Target: $400
 69% 

ServerSecure (Files only) - Server protection against the Upload / Download exploit.


Post New Thread Reply   
 
Thread Tools Display Modes
Atreus
SourceMod Donor
Join Date: Apr 2005
Location: San Diego, CA
Old 11-16-2010 , 06:11   Re: ServerSecure (Files only) - Server protection against the Upload / Download explo
Reply With Quote #11

Awesome! Thanks asher
Atreus is offline
Send a message via AIM to Atreus Send a message via MSN to Atreus
tigerox
AlliedModders Donor
Join Date: Oct 2008
Location: Canada
Old 11-19-2010 , 13:31   Re: ServerSecure (Files only) - Server protection against the Upload / Download explo
Reply With Quote #12

Quote:
Originally Posted by tigerox View Post
Would this allow someone to upload a file with the same name as a vaild downloadable file, or are file overwrites not exploitable?

Example. Overwriting map files in the /maps folder.
Does anyone have an answer to this question? Asked a while ago with no reply.

Thanks.
__________________
tigerox is offline
asherkin
SourceMod Developer
Join Date: Aug 2009
Location: OnGameFrame()
Old 11-19-2010 , 13:45   Re: ServerSecure (Files only) - Server protection against the Upload / Download explo
Reply With Quote #13

As far as I know, Valve actually succeeded in patching the uploading portion of the exploit, they just left holes in the download filter.

EDIT: <@AzuiSleet> you can't overwrite files except by converting them to directories (which isn't possible with the fix)
__________________

Last edited by asherkin; 11-21-2010 at 03:06.
asherkin is offline
tigerox
AlliedModders Donor
Join Date: Oct 2008
Location: Canada
Old 11-19-2010 , 17:21   Re: ServerSecure (Files only) - Server protection against the Upload / Download explo
Reply With Quote #14

Quote:
Originally Posted by asherkin View Post
As far as I know, Valve actually succeeded in patching the uploading portion of the exploit, they just left holes in the download filter.
Great. Thanks for the reply.
__________________
tigerox is offline
sinblaster
Grim Reaper
Join Date: Feb 2010
Location: Australia
Old 11-27-2010 , 07:57   Re: ServerSecure (Files only) - Server protection against the Upload / Download explo
Reply With Quote #15

Quote:
Originally Posted by asherkin View Post
Only with D-FENS (and ServerSecure if on Windows).

I appologise in advance asherkin but I am lost with this mate. I am running Windows Server / mmsource-1.8.4 / sourcemod-1.3.6

I also have D-fens. I should uninstall D-fens if I want to use this?
__________________
Happy Happy Joy Joy

sinblaster is offline
KyleS
SourceMod Plugin Approver
Join Date: Jul 2009
Location: Segmentation Fault.
Old 11-27-2010 , 08:06   Re: ServerSecure (Files only) - Server protection against the Upload / Download explo
Reply With Quote #16

Quote:
Originally Posted by sinblaster View Post
I should uninstall D-fens if I want to use this?
You should remove D-Fens if you want to use this.
KyleS is offline
sinblaster
Grim Reaper
Join Date: Feb 2010
Location: Australia
Old 11-27-2010 , 08:09   Re: ServerSecure (Files only) - Server protection against the Upload / Download explo
Reply With Quote #17

Thanks kyle its just when it mentioned (and ServerSecure if on Windows) and the name of this extension being "ServerSecure" I got lost.

Really appreciate your help.
__________________
Happy Happy Joy Joy

sinblaster is offline
Xaphan
SourceMod Donor
Join Date: Jun 2008
Old 04-14-2011 , 16:38   Re: ServerSecure (Files only) - Server protection against the Upload / Download explo
Reply With Quote #18

I was using D-FENS until last night...
yes servers all updated to current version, this must be new exploit on win servers only.
Quote:
L 04/13/2011 - 23:09:09: [D-FENS] "<><STEAM_0:1:26233280><IP>" uploaded file "maps/cs_office.bsp\hacked.txt".
I removed D-FENS and install this extension.

Question is: Will this extension log actions?
__________________
Xaphan is offline
asherkin
SourceMod Developer
Join Date: Aug 2009
Location: OnGameFrame()
Old 04-15-2011 , 03:16   Re: ServerSecure (Files only) - Server protection against the Upload / Download explo
Reply With Quote #19

This extension has been updated for todays update.

Quote:
Originally Posted by Xaphan View Post
Question is: Will this extension log actions?
Yes.
__________________
asherkin is offline
tigerox
AlliedModders Donor
Join Date: Oct 2008
Location: Canada
Old 04-15-2011 , 07:30   Re: ServerSecure (Files only) - Server protection against the Upload / Download explo
Reply With Quote #20

Quote:
Originally Posted by asherkin View Post
This extension has been updated for todays update.
Could you please post the updated files.

Thanks.
__________________
tigerox is offline
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 08:59.


Powered by vBulletin®
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
Theme made by Freecode