Server exploits. - Page 2

marrr · 08-22-2010 , 20:55 Re: Server exploits.

any of you that got hacked running HLstatsX Community Edition 1.6.10?

nOzE · 08-23-2010 , 06:31 Re: Server exploits.

Im running hlx 1.6.10!

Is there a issue with it?

marrr · 08-23-2010 , 14:43 Re: Server exploits.

Quote:

Originally Posted by nOzE

Im running hlx 1.6.10!

Is there a issue with it?

We had someone gain access to our stats yesterday and since it doesn't encrypt the rcon passwords the person was able to ban people/change server name/spam messages.

Not sure if this is related in anyway..

nOzE · 08-23-2010 , 16:47 Re: Server exploits.

If he hacked your website/mysql-server with you hlx hosted he has your rcon password! At least they have to be "on" the server do do it. In my case it should be impossible he got the rcon password. So banning solved the problem!

marrr · 08-23-2010 , 18:26 Re: Server exploits.

he doesnt have to be on the server... He can use hlsw to to mess around with things.

NouveauJoueur · 08-24-2010 , 00:19 Re: Server exploits.

He meant he has no rcon password I think.

Ritsuka · 08-24-2010 , 02:11 Re: Server exploits.

Quote:

Originally Posted by marrr

he doesnt have to be on the server... He can use hlsw to to mess around with things.

Have you tried either ip banning or ip range ban?