search -  faq -  rulez -  staff

forums






map cycle
irc              pwnalizer
voice         dswp bar




Register

Login


It is currently 12.22.24

  

View unanswered posts | View active topics


Board index » Wellcome Every1 :) » Forum / Gameserver Support

All times are UTC + 1 hour




Post new topic Reply to topic  Page 1 of 3
  [ 28 posts ]  Go to page 1, 2, 3  Next
  Print view Previous topic | Next topic 
Author Message
JackAv
PostPosted: 10.20.09 
Offline
posted some :)

Joined: 09.27.09
Posts: 80
Hallo Leute.
Seit ein paar tagen werden meine Server regelmäßig gehackt.
Es heist immer in so ner vote:
Code:
map x rconpassword eatmynade

Und dann ist können die alles auf meinen server machen.
Dann geht nichtmal mehr B3.
Angeblich ist das irgendso eiin Bug in der Q3 energie.Gibts da ne alternative methode ohne mapvote zu deaktivieren?
Ich hoff ihr könnt mir helfen. Das dumme ist uc seh im Log nichtmal wer das war.
HAb jetzt meine Server heruntergefahren.

_________________
Image



 
Top
 Profile  
 
Rylius
PostPosted: 10.20.09 
Offline
posted some :)
User avatar

Joined: 01.24.09
Posts: 312
Location: Germany
Quote:
Important Security Update

This is a very important security update. About 2 months ago we released a security fix for the Vote System expoilt that allowed people to steal control of your servers. Up until now the damage has been minimal, however, there are now people activly using this method in Europe and in which case most likely to spread almost everywhere!

It is very important that all server admins use the new server binary. At the moment we only have this file for linux in 32bit. This can be found here. I have had reports from many people within the community about there servers being stolen.

All future released of Urban Terror will have this patch included. If you do not use the above binary, i strongly suggest turning voting off. Thanks!



wtf how does that sloganizer come into my sig? :O

_________________
wursti wrote:
Anime? wow thats that movies where 100 dicks come out of a monster?



 
Top
 Profile  
 
wurst
PostPosted: 10.20.09 
Offline
Godlike
User avatar

Joined: 07.15.08
Posts: 4648
Location: Behind U
-----tdm:  
nick: [dswp]GewitterOma
skill: 1122.83
kills: 25960
deaths: 19847
ratio: 1.30
-----bomb:  
nick: [dswp]GewitterOma
skill: 812.172
kills: 3885
deaths: 3541
ratio: 1.09
plz go to http://www.urbanterror.net/news.php

and read this again:
URT official News wrote:
This is a very important security update. About 2 months ago we released a security fix for the Vote System expoilt that allowed people to steal control of your servers. Up until now the damage has been minimal, however, there are now people activly using this method in Europe and in which case most likely to spread almost everywhere!

It is very important that all server admins use the new server binary. At the moment we only have this file for linux in 32bit. This can be found here. I have had reports from many people within the community about there servers being stolen.

All future released of Urban Terror will have this patch included. If you do not use the above binary, i strongly suggest turning voting off. Thanks!


then klick on this link
ftp://ftp.snt.utwente.nl/pub/games/urba ... rTded.i386

btw: we have topic ouselfse somewhere bout that prob.
THing on this site is that we run a custom self-compiled binary.
voting is off..



ps ui rylius, u was faster.
whatever i was faster with the sig lol. its btw the croppalizer since it snipps the sloganizer :D

_________________
Image



 
Top
 Profile  
 
JackAv
PostPosted: 10.20.09 
Offline
posted some :)

Joined: 09.27.09
Posts: 80
Ah thx but my server is running windows :cry:
I heard there is a fix fpr windows. Bur i dont know how to find the fix btw wherte i can download this.
Is ist the same problem if i run urt mod under quake 3 ?

PLS help me i am afraid to start my servers :x :?


Now i make a backup of all servers. So i can recover my servers if someone try to crash my server.

_________________
Image



 
Top
 Profile  
 
SvaRoX
PostPosted: 10.20.09 
Offline
Leader
User avatar

Joined: 11.29.08
Posts: 1972
First disable voting...
You didn't find any Windows binary ??

_________________
ut4_he_tennis_v0.1
-------------------------
"We are talking about computers here, compared to those I can read women like a book ;P"
Unclefragger



 
Top
 Profile  
 
JackAv
PostPosted: 10.20.09 
Offline
posted some :)

Joined: 09.27.09
Posts: 80
No i found nothin gi was seaching for urban terror rcon stealer fix and other tags.

_________________
Image



 
Top
 Profile  
 
AimMe
PostPosted: 10.20.09 
Offline
Godlike
User avatar

Joined: 09.28.08
Posts: 2318
Location: Solar System
They gave source, can't you compile it?

_________________
Image



 
Top
 Profile  
 
Unclefragger
PostPosted: 10.20.09 
Offline
Godlike
User avatar

Joined: 10.14.08
Posts: 2006
Location: rooftops
-----tdm:  
nick: [dswp]ucf
skill: 472.479
kills: 532
deaths: 332
ratio: 1.60
http://forums.urbanterror.net/topic/183 ... ty-update/
I think they did post some binaries as well there

_________________
"Always code as if the guy who ends up maintaining your code will be a violent psychopath who knows where you live."
- Martin Golding



 
Top
 Profile  
 
wurst
PostPosted: 10.20.09 
Offline
Godlike
User avatar

Joined: 07.15.08
Posts: 4648
Location: Behind U
-----tdm:  
nick: [dswp]GewitterOma
skill: 1122.83
kills: 25960
deaths: 19847
ratio: 1.30
-----bomb:  
nick: [dswp]GewitterOma
skill: 812.172
kills: 3885
deaths: 3541
ratio: 1.09
oki i did it, please test my wife force me to go shopping :shock:
hope i didnt screw up any, compiled as usual.
hope i didnt overwrite now the maxclients etc, i hd somehow 2 trunks on my messed up drive...

Code:
florian@FLO /ioq3-source
$ make
make[1]: Entering directory `/ioq3-source'

Building ioquake3 in build/release-mingw32-x86:
  PLATFORM: mingw32
  ARCH: x86
  COMPILE_PLATFORM: mingw32
  COMPILE_ARCH: x86
  CC: gcc

  CFLAGS:
    -MMD
    -Wall
    -fno-strict-aliasing
    -Wimplicit
    -Wstrict-prototypes
    -DUSE_ICON
    -Icode/SDL12/include
    -DUSE_OPENAL=1
    -DUSE_OPENAL_DLOPEN
    -DUSE_CURL
    -DCURL_STATICLIB
    -m32
    -DUSE_LOCAL_HEADERS
    -DNDEBUG
    -O3
    -march=i586
    -fno-omit-frame-pointer
    -ffast-math
    -falign-loops=2
    -funroll-loops
    -falign-jumps=2
    -falign-functions=2
    -fstrength-reduce

  Output:
    build/release-mingw32-x86/ioUrTded.x86.exe

make[2]: Entering directory `/ioq3-source'
DED_CC code/server/sv_bot.c
DED_CC code/server/sv_client.c
DED_CC code/server/sv_ccmds.c
DED_CC code/server/sv_game.c
DED_CC code/server/sv_init.c
DED_CC code/server/sv_main.c
code/server/sv_main.c: In function `SV_Frame':
code/server/sv_main.c:873: warning: implicit declaration of function `SV_CheckClientUserinfoTimer'
DED_CC code/server/sv_net_chan.c
DED_CC code/server/sv_snapshot.c
code/server/sv_snapshot.c: In function `SV_CheckClientUserinfoTimer':
code/server/sv_snapshot.c:719: warning: implicit declaration of function `SV_UpdateUserinfo_f'
DED_CC code/server/sv_world.c
DED_CC code/qcommon/cm_load.c
DED_CC code/qcommon/cm_patch.c
DED_CC code/qcommon/cm_polylib.c
DED_CC code/qcommon/cm_test.c
DED_CC code/qcommon/cm_trace.c
DED_CC code/qcommon/cmd.c
DED_CC code/qcommon/common.c
DED_CC code/qcommon/cvar.c
DED_CC code/qcommon/files.c
DED_CC code/qcommon/md4.c
DED_CC code/qcommon/msg.c
DED_CC code/qcommon/net_chan.c
DED_CC code/qcommon/net_ip.c
DED_CC code/qcommon/huffman.c
DED_CC code/qcommon/q_math.c
DED_CC code/qcommon/q_shared.c
DED_CC code/qcommon/unzip.c
DED_CC code/qcommon/vm.c
DED_CC code/qcommon/vm_interpreted.c
BOT_CC code/botlib/be_aas_bspq3.c
BOT_CC code/botlib/be_aas_cluster.c
BOT_CC code/botlib/be_aas_debug.c
BOT_CC code/botlib/be_aas_entity.c
BOT_CC code/botlib/be_aas_file.c
BOT_CC code/botlib/be_aas_main.c
BOT_CC code/botlib/be_aas_move.c
BOT_CC code/botlib/be_aas_optimize.c
BOT_CC code/botlib/be_aas_reach.c
BOT_CC code/botlib/be_aas_route.c
BOT_CC code/botlib/be_aas_routealt.c
BOT_CC code/botlib/be_aas_sample.c
BOT_CC code/botlib/be_ai_char.c
BOT_CC code/botlib/be_ai_chat.c
BOT_CC code/botlib/be_ai_gen.c
BOT_CC code/botlib/be_ai_goal.c
BOT_CC code/botlib/be_ai_move.c
BOT_CC code/botlib/be_ai_weap.c
BOT_CC code/botlib/be_ai_weight.c
BOT_CC code/botlib/be_ea.c
BOT_CC code/botlib/be_interface.c
BOT_CC code/botlib/l_crc.c
BOT_CC code/botlib/l_libvar.c
BOT_CC code/botlib/l_log.c
BOT_CC code/botlib/l_memory.c
BOT_CC code/botlib/l_precomp.c
BOT_CC code/botlib/l_script.c
BOT_CC code/botlib/l_struct.c
DED_CC code/null/null_client.c
DED_CC code/null/null_input.c
DED_CC code/null/null_snddma.c
DED_CC code/sys/con_log.c
DED_CC code/sys/sys_main.c
AS code/asm/ftola.s
AS code/asm/snapvectora.s
AS code/asm/matha.s
DED_CC code/qcommon/vm_x86.c
WINDRES code/sys/win_resource.rc
DED_CC code/sys/sys_win32.c
code/sys/sys_win32.c:41: warning: 'homePath' defined but not used
DED_CC code/sys/con_win32.c
LD build/release-mingw32-x86/ioUrTded.x86.exe
make[2]: Leaving directory `/ioq3-source'
make[1]: Leaving directory `/ioq3-source'

 


im back in 2-3h


gg


Attachments:
ioUrTded.zip [376.06 KiB]
Downloaded 910 times

_________________
Image



 
Top
 Profile  
 
Unclefragger
PostPosted: 10.20.09 
Offline
Godlike
User avatar

Joined: 10.14.08
Posts: 2006
Location: rooftops
-----tdm:  
nick: [dswp]ucf
skill: 472.479
kills: 532
deaths: 332
ratio: 1.60
you do see that you are using gcc in a mingw environment? ^^
I would have to be familiar with the exploit in order to live test it ... maybe someone is ...

_________________
"Always code as if the guy who ends up maintaining your code will be a violent psychopath who knows where you live."
- Martin Golding



 
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 3
  [ 28 posts ]  Go to page 1, 2, 3  Next

Board index » Wellcome Every1 :) » Forum / Gameserver Support

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 23 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Imprint

Powered by phpBB © 2000, 2002, 2005, 2007, 2008, 2009, 2010 phpBB Group

Skin by Lucas Kane
we use apache2 mod rewrite with phpBB SEO
map train_beta1-100 © 2009 by SteveMcQueen
Statistics Backend + Database by XLR Stats and B3 Bot
mapvote robot and gameserver monitor © 2009 by BlinKy
mumble viewer Copyright © 2008 Dominik Radner (aka Urmel)
mumble switcher and integration © 2008 by XTJ7, Unclefragger and Wursti
Localisation Plugin © 2009, Team Leads Plugin © 2009 and Knifer Plugin © 2009 by SvaRoX
for our stats we use Chart.js Copyright (c) 2013-2015 Nick Downie.
the stats also use some jQuery jQuery v2.1.4 | (c) 2005, 2015 jQuery Foundation, Inc.



voice server
btw test the new ajax serwer monitor here!
top 20 players


nameskillkills
-Dws.BLINGBLING*-*1730.63418631
NormaSnockers1865.75400492
Zottel1760.8276378
make.them.suffer1846.17269872
>8v=1825.35230156
moon1777.56195615
sjas1692.49192315
peace1878.86190660
Wagner_Moura1562.9188001
Goomba1859.75182677
z0rn1608.41181016
Mad1803.76179124
[dswp]PLZ1847.85178516
Graf_ZahlIII1835.73167407
Zohan1611.07159737
ubercunt1634.93159240
Yarrr!1917.33156233
I_am_nOOb1909.64151268
Pandageddon1891.75148319
Pirat1664.08145798