[]_[Rookie1]

As indicated in this news post, there is a known exploit that allows to takeover a server.

Does anyone know if there is an updated ioUrTded binary for Windows available as well? Or is it still only available for linux 32bit?

[Rambetter]

Rookie1, on 08 March 2010 - 08:51 AM, said:

As indicated in this news post, there is a known exploit that allows to takeover a server.

Does anyone know if there is an updated ioUrTded binary for Windows available as well? Or is it still only available for linux 32bit?

You could always get the source code ( http://forums.urbant...-exploit-fixes/ ) and compile yourself. I _have_ compiled ioquake3/ioUrTded on Windows, so it is possible. I'm not even a Windows guru. You just have to follow instructions.

[]_[Rookie1]

But according to that thread the fix is not in the SVN repository?

Quote

MaJ has done something with the moderator stuff, but that change is not in this SVN repository

[uJ|V00d00]

Rookie1, on 09 March 2010 - 01:39 AM, said:

But according to that thread the fix is not in the SVN repository?

The moderator patch is something else, to do with an extended referee style function that MaJ was developing.

The current svn should have the fix you are lokking for already built in.

[]_[Rookie1]

ah ok, thx for the clarification.
will try the SVN snapshot later this week.

[Bodhisattva]

Any luck?

A windows server with the rcon exploit patched would be really useful. If u figure this out, please share.

[mitsubishi]

ioUrTded.x86.exe.from_Rambetter_SVN_12052010+don't_kick_easily

Untested.[a bit tested now] From SVN above only, not a single code change[1, see below]. Compiled on a recent MinGW-w32 (MinGW-w64's 32bit project, not same with old MinGW32, but probably it doesn't make much difference).

EDIT: Changed url's binary to one that while it does account for certain exploits in SV_ExecuteClientCommand() [noteably 'max length in message'] it doesn't kick the client but just keeps ignoring the client command.

This post has been edited by mitsubishi: 11 May 2010 - 11:48 PM

[Cookie]

Thanks :P Will test it.

[FCDE-Wolfseye]

Well, is that new Version for Windows working good or not ?

[DJ Schuby]

mitsubishi, on 27 March 2010 - 09:07 PM, said:

ioUrTded.x86.exe.from_Rambetter_SVN_27032010.zip

Untested. From SVN above only, no a single code change. Compiled on a recent MinGW-w32 (MinGW-w64's 32bit project, not same with old MinGW32, but probably it doesn't make much difference).

I finally got around to running that executable on my server and now it seems that people get kicked at random with the message "Server Disconnected Talks too much".

I think there maybe a strange bug with this. I've been kicked from the icyjumps server with the talks too much message after using this bind. Weird thing is that I hadn't used the radio at all except for using it once.

bind b "ut_radio 6 9 I am at $location. I have a $weapon with $bullets rounds and $clips clips.

I just got kicked off my own server for using this bind once as well. Like before, I wasn't even using the radio until I pressed it.