Actaully, just typing physics_select crashes the server @ the
console.physics_select
./srcds_run: line 352: 23321 Segmentation fault $HL_CMD
Add "-debug" to the ./srcds_run command line to generate a debug.log to help
with solving this problem
Fri Jan 30 13:03:47 EST 2009: Server restart in 10 seconds
-----Original Message-----
From: "Tony Paloma" <drunkenf...@hotmail.com>
Sent 1/30/2009 12:40:45 PM
To: "'Half-Life dedicated Win32 server mailing list'"
<hlds@list.valvesoftware.com>, "'Half-Life dedicated Linux server mailing
list'" <hlds_li...@list.valvesoftware.com>
Subject: [hlds] New srcds exploitHello!
Just got a mysterious crash on one of my servers right now! Luckily, I had
my debug log going. User was spamming chat:
[01/30/09 11:07:57 AM] Command on client 10 Chrisaster STEAM_0:1:8368633:
[01/30/09 11:07:57 AM] say www.sythe.org/showthread.php?t=558846
[01/30/09 11:07:57 AM] Command on client 10 Chrisaster STEAM_0:1:8368633:
[01/30/09 11:07:57 AM] say www.sythe.org/showthread.php?t=558846
[01/30/09 11:07:57 AM] Command on client 10 Chrisaster STEAM_0:1:8368633:
[01/30/09 11:07:57 AM] say www.sythe.org/showthread.php?t=558846
[01/30/09 11:07:57 AM] Command on client 10 Chrisaster STEAM_0:1:8368633:
[01/30/09 11:07:57 AM] say www.sythe.org/showthread.php?t=558846
[01/30/09 11:07:57 AM] Command on client 10 Chrisaster STEAM_0:1:8368633:
[01/30/09 11:07:57 AM] say www.sythe.org/showthread.php?t=558846
[01/30/09 11:07:57 AM] Command on client 10 Chrisaster STEAM_0:1:8368633:
[01/30/09 11:07:57 AM] say www.sythe.org/showthread.php?t=558846
Followed by him disconnecting:
[01/30/09 11:08:03 AM] HookDisconnect(Disconnect by user., 10, Chrisaster)
[01/30/09 11:08:03 AM] ClientDisconnect(10, Chrisaster, STEAM_0:1:8368633)
[01/30/09 11:08:03 AM] ClientDisconnect finish.
And then he reconnects and immediately executes a command. Seems very
strange. He hadn't even loaded or reached ClientActivate or anything yet. He
must have some kind of special script or program helping him out.
[01/30/09 11:08:06 AM] HookConnectClient(86.3.55.24:32105, 14, 65886321, 3,
"Chrisaster", "")
[01/30/09 11:08:06 AM] HookGetFreeClient
[01/30/09 11:08:06 AM] HookConnect(Chrisaster, 509, 10)
[01/30/09 11:08:06 AM] ClientConnect(10, Chrisaster, 86.3.55.24:27005)
[01/30/09 11:08:06 AM] Command on client 10 Chrisaster :
[01/30/09 11:08:06 AM] physics_select
And then it crashed. No core dump was produced which is also strange.
Anyways, use the various plugins out there to block/remove this command. I
couldn't reproduce this by using commands. I tried doing physics_select
while in game and I tried doing "connect <ip> ; physics_select; wait;
physics_select" and it also didn't work.
Thanks,
Tony
_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds
_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds
