[soik]

WebMod "Content-Length" Buffer Overflow Vulnerability


Please, if anyone knows how to fix that bug or compile the src code below, post here!

.(DiGLoW). BoBRoCK made a patch for linux, but it's not compiled yet.
Could anyone compile and post here? Or any other workaround.

http://djeyl.net/forum/index.php?sho...0&#entry375395

It would be really appreciated.

[killer_val]

description stat pend file vers src load unlod
[ 1] AMX Mod X RUN - amxmodx_mm_i386. v1.8.0.3 ini Start ANY
[ 2] HL-Booster RUN - booster_mm.so v1.36 ini Chlvl Pause
[ 3] HLGuard RUN - hlguard_mm_optim v1.8 ini Chlvl Chlvl
[ 4] <w_mm_i386.so> badf load w_mm_i386.so v - ini - -
[ 5] sxei RUN - sxei_mm_i386.so v6.0.1.7 ini ANY ANY
[ 6] ClanMod RUN - clanmod_mm_i586. v1.82b1 ini Pause Pause
[ 7] STATSME RUN - statsme_mm_i386. v2.8.3 ini Chlvl Chlvl
[ 8] Fun RUN - fun_amxx_i386.so v1.8.0.3 pl1 ANY ANY
[ 9] Engine RUN - engine_amxx_i386 v1.8.0.3 pl1 ANY ANY
[10] FakeMeta RUN - fakemeta_amxx_i3 v1.8.0.3 pl1 ANY ANY
[11] CStrike RUN - cstrike_amxx_i38 v1.76 pl1 ANY ANY
[12] CSX RUN - csx_amxx_i386.so v1.8.0.3 pl1 ANY ANY
[13] Ham Sandwich RUN - hamsandwich_amxx v1.8.0.3 pl1 ANY ANY
13 plugins, 12 running

[danielkza]

According to the security report,the bug was fixed in 0.48.

[BAILOPAN]

IIRC cybermind found another that was never fixed. I don't know if he disclosed it though.

[tomba2k]

Linux version of unofficial WebMod MUST be compiled on computer which will run it on metamod. (server)
For that you need HL & metamod SDK and WebMod source.
Notice if u r using metamod p, you will need metamod p sdk.
My example: http://85.10.63.74:27018/

[Sn!ff3r]

Patched -> http://reallite.cs2.ru/modules.php?n...=getit&lid=140

[cevaps]

oh, sniffer thanks much! but, is it russian? o.O

[tituscorp]

The Russian version does not work....
I have a server with webmod and they steal information for Http by means of webmod..
Some help??