Re: [hlds] TF2 Client Crash Exploit

2015-06-10 Thread scott biszmaier
and by disabling sprays server side you are referring to setting these cvars: sv_allowupload 0 sv_allowdownload 0 ? Thanks On 6/10/2015 2:05 PM, Nathaniel Theis wrote: I reported this (well, two independent ways of accomplishing this) to Valve about a month ago. Apparently, it's still

Re: [hlds] TF2 Client Crash Exploit

2015-06-10 Thread Eric Smith
We’re working on a fix and should have something soon. -Eric From: hlds-boun...@list.valvesoftware.com [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Nathaniel Theis Sent: Wednesday, June 10, 2015 11:06 AM To: hlds@list.valvesoftware.com Subject: Re: [hlds] TF2 Client Crash Exploit

Re: [hlds] TF2 Client Crash Exploit

2015-06-10 Thread Nathaniel Theis
I reported this (well, two independent ways of accomplishing this) to Valve about a month ago. Apparently, it's still unpatched. Disabling sprays on your client will prevent you from crashing, and disabling sprays on the server will prevent attackers from crashing your server's players.

Re: [hlds] TF2 Client Crash Exploit

2015-06-10 Thread Mike Vail
Thanks to those of you who reported this. Ironically I just bumped all me servers up to sv_pure 2 this morning because I'm so sick of all the porn spray these idiots are using. Looks like my timing was perfect. It always amazes me how quickly people find these exploits.If only they would use all

[hlds] TF2 Client Crash Exploit

2015-06-06 Thread Adam Walker
Has anyone been encountering players that seem to be able to cause someone's Team Fortress 2 client to close to the desktop? We've recently had a player performing these actions, but are unsure how they are doing it or how to protect against it. The player in question was known as lunar with ID

Re: [hlds] TF2 Client Crash Exploit

2015-06-06 Thread Adam Walker
It appears to still be possible in version 2813840. On Sun, Jun 7, 2015 at 01:19 AM, E. Olsen wrote: Hmm...I had thought Valve had fixed this a couple of patches ago (Eric Smith was aware of it). On Sat, Jun 6, 2015 at 7:51 PM, Adam Walker wrote: As a follow-up, the issue appears to be caused

Re: [hlds] TF2 Client Crash Exploit

2015-06-06 Thread Adam Walker
As a follow-up, the issue appears to be caused by an invalid .vtf spray. I will not post the associated file on the mailing list, but will provide it upon request. When the .vtf is loaded by the client it seems to cause a memory access violation, which results in the game crashing. This also

Re: [hlds] TF2 Client Crash Exploit

2015-06-06 Thread E. Olsen
Hmm...I had thought Valve had fixed this a couple of patches ago (Eric Smith was aware of it). On Sat, Jun 6, 2015 at 7:51 PM, Adam Walker crashd...@ozzyfurocity.net wrote: As a follow-up, the issue appears to be caused by an invalid .vtf spray. I will not post the associated file on the

Re: [hlds] TF2 Client Crash Exploit

2015-06-06 Thread wickedplayer494
Yeah, I'd send that one in directly to Valve. Put the offending file on some service like Google Drive, Dropbox, OneDrive, etc. On 6/6/2015 6:51 PM, Adam Walker wrote: As a follow-up, the issue appears to be caused by an invalid .vtf spray. I will not post the associated file on the mailing