Urgent: New security bug?

blaacky · **Author**

Where can I report this privately? It's about as bad as it can get.

EDIT: Apparently this bug hit hard on many servers, especially in Garry's Mod. It lets players see into the server.cfg file and retrieve the rcon password. I'm told setting sv_allowdownload to 0 will fix it.

hamilton5 · 04-19-2014 , 07:03 Re: Urgent: New security bug?

oh the humanity don't play teh wavzzzz windowzzz

asherkin · 04-19-2014 , 08:34 Re: Urgent: New security bug?

The best way is to file a bug. Bugs in the AM Security component are visible only to members of the core team.

psychonic · 04-19-2014 , 12:57 Re: Urgent: New security bug?

It should be noted that this is not a bug in SourceMod, but rather a bug in the Source Engine.

Powerlord · 04-19-2014 , 13:27 Re: Urgent: New security bug?

There was already a conversation going about this bug on the hlds mailing list.

nikooo777 · 04-19-2014 , 13:38 Re: Urgent: New security bug?

I was also hit!
But it happened on counter strike source.
Is there any connections with it?

AeroAcrobat · 04-19-2014 , 14:34 Re: Urgent: New security bug?

http://facepunch.com/showthread.php?...1#post44589068

Anything to take care of or looking for files?
Should we set [TF2] sv_allowupload 0;sv_allowdownload 0 ?

I'm a bit worried because of the lack of info :/

Fearts · 04-19-2014 , 15:41 Re: Urgent: New security bug?

Would be nice if someone fixed this: https://forums.alliedmods.net/showthread.php?t=142249

AeroAcrobat · 04-19-2014 , 15:48 Re: Urgent: New security bug?

Quote:

Originally Posted by Fearts

Would be nice if someone fixed this: https://forums.alliedmods.net/showthread.php?t=142249

What about: https://forums.alliedmods.net/showth...6541&page=2#16

blaacky · *Last edited by blaacky; 04-19-2014 at 18:02.*

It happened in Counter-Strike:Source for me as well. Forgot to mention that.