HLDS Exploit Released

[|=AoGO=| DaButcha]

hmz.. not patching with a non-official release here. Even though I'm really scared of kiddies that were banned and start threatening. Whaha.



Anyway, let's face it: if "they" really want to take your server down, they'll get it done anyway, exploit or no exploit. There's barely any defense against a "classic" dDOS.

[orphy]

FAF wrote..

Nope, ALL words beginning with "H" are supposed to have "an" as the indefinite article; ie "an" hotel, "an" historical fact, "an" half life server....



/me waits for an english major to prove me wrong ...

You're wrong. It's "a" hotel or "a" half life server. Have you EVER heard anyone says "man that's an hot chick"?

[TorchedN00dle]

It's true, Orph. Look it up. In the "a"-"an" case, h can be considered a vowel and therefore "an" can be used. Long story short, "an" can only be used when in front of a word starting with a vowel or an h.

[orphy]

I've always learned that "an" can ONLY go infront of vowels, no exceptions. Saying "an hot chick" still sounds awkward to me.



Edit: However, I seem to use "an" in the phrash "half an hour" or any phrase with the word hour. God damn I hate our language. Too confusing!

[Foo2rama]

2 things.



1st people wonder why he did this, well this is done all the time showing bugs and writing the paper all the time, it is called full disclosure. There are ones for Windows all the time.

http://news.zdnet.co.uk/software/develo...104841,00.htm here is a good link for info....



2nd the an a H thing is only if the H is pronounced like a vowel... it is the same thing with Y.

examples

The article a is used before consonant sounds; an is used before vowel sounds.



Words beginning with h, o and u sometimes begin with a vowel sound, sometimes a consonant sound.



Consonant Sound: a heroic couplet (h sound)



a once-happy lover (w sound)



a universal problem (y sound)



Vowel Sound: an honest man (no h sound)



an only child (o sound)



an unusual insect (u sound)

[*Vamp*]

Foo2rama hit the nail right on the head there. Good show that man.



As for this crashing HL servers thing.... it's never been a problem before, why should we get bothered by it now? If people want to crash game servers, they just spend a day learning how to do it off their own backs, they won't bother downloading an application for it (no 'true' hacker would ever even think of using a rady-made {and thus tracable} program, always do it of your own back).

[Pharlap]

good work luigi! debugging code especially at the assembler code level is not aN easy thing to do.

its good that he released a patch for the servers, but he did say, use at your own risk and tell me if any problems occur. ie no one is forcing u to patch your servers. and programs will always contain bugs, nothing is perfect.

its a shame that he released a program capable of crashing servers, rather than releasing an executable capable of doing that, he shouldve just released a test program which tests the vulnerability without any side effects (crashes). and since this affects all of HL 4111 (or woteva) servers, then surely they are all vulnerable.

[BoNeLeSS]

Edited by [user="24407"] @ [time="1059523859"]

Weird... Some admin from the hlds discussion list tested the example script provided by the Security researcher and only seems to work (IE crash server) on old versions... Current patches (x.1.1.1c1) seems to be invulnerable to these exploits ATM.



So.. Admins keep patched your servers...



Edit: Tested myself on 4.1.1.1c1 and Result for both exploits is "The server doesn't seems to be vulnerable" :)



Edit2: Second test seemed to work



Edit3: Seems to work if password is not set.

[shurcool]

hahahahahahaha... rofl, this is too funny.



i expect a lot of popular servers (zEx pub, etc.) to go down sometime soon.



ps. not by me, i swear! no, seriously... =\ i'm not mean like that, but i'm sure there are lots of mean hax0rs which will find this command line exe a peice of cake 2 use.



ps2. what happenede 2 myg07? their site seems 2 be down, and it's been a while since i've checked out what they're up to. can i assume they're dead?

[dassbaba]

kill dassbaba

[Buddah]

dassbaba wrote..

kill dassbaba

I'll do the honors.

[naem]

shurcool wrote..

i expect a lot of popular servers (zEx pub, etc.) to go down sometime soon.

zex, 3d, wew pubs are all down atm =\

[Softy's 24/7 Fraggin]

Edited by [user="3670"] @ [time="1059529400"]

does the HLDS program shut down or just freeze and stay open? (when attacked) that happened twice today to the noob server. that POS has it's share of crashes but it's never frozen in the middle of a fire fight with the program still running.

[orphy]

shurcool wrote..

ps2. what happenede 2 myg07? their site seems 2 be down, and it's been a while since i've checked out what they're up to. can i assume they're dead?

Oh they're still around, but they're site is just dead. I thought they were redesigning or some shit.

[Pharlap]

Buddah wrote..

I'll do the honors.

and ill mutilate the body parts.

naem wrote..

zex, 3d, wew pubs are all down atm =\

grrr. i wish i knew where those nerds live, and ill come into their room and open their curtains to blind their tiny beady eyes unacustomed to daylight.. mwahhaa, im so mean.