[Naltrik]

Hello,

I don't know if i'm at the right position in this forum, but i have some issues with amxmodx

Since some times, i thought that commands were disable, i mean do some commands on a player computer thanks to a plugin.

But today, i had a little problem, a plugin on a server was opening my cd reader or close it as it want.

Is it normal, and how is it possible ?

[gabuch2]

Not normal, and it is possible with an exploit.

I suggest you to search another server since it probably has the power to fuck with your game files.

[Naltrik]

It is on condition:zero game, but how can it works ?

[JusTGo]

Originally Posted by Naltrik It is on condition:zero game, but how can it works ?

command:cd eject
possible fix: cl_filter... to 1.

[Naltrik]

We can still make make someone make commands without his permission ?

[JusTGo]

Originally Posted by Naltrik We can still make make someone make commands without his permission ?

yes there is some ways to do it.

[siriusmd99]

The server is hosted on different pc or the same PC you had opened CD?

If it's the same PC look if you don't have installed module "ExexuteX" because it has access to your PC command line.

[gabuch2]

Originally Posted by JusTGo command:cd eject possible fix: cl_filter... to 1.

You can bypass cl_filtercmdstuff with the exploit.

Heck, if I recall correctly, CSZero doesn't even have this command.

[siriusmd99]

Arkshine,I posted this to make developers fix this vulnerability.Ostrog said it wont be fixed because its hard and it will stay for a long time in the future.
How the hell it's hard to be fixed if there are v35 non steam clients which have the full protection?

[gabuch2]

I understand that AlliedModders want to protect its users, however deleting these kind of post it's just a desperate struggle, since this exploit, along with many others, it's listed on *snip*.