Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Garry's Mod Server-Exploit - Infect players trough the server?

Hey,

I found this announcement about an exploit in Garry's Mod which allows you to infect players if the join your server.

http://www.shooter-szene.de/content/dive...titel.html

It's German - Google translate:

Quote:Lately, many minor and major security vulnerabilities are discovered . Now it has also caught the sandbox title Garry 's Mod . But this discovery is different. It happened that is caused by a virus .
The cough virus is different than other viruses. Instead of destroying the PC spy data and paralyze all makes this on a nerve of Garry 's Mod player. If one has captured the virus can suddenly starts all friends in the friends list on Steam a message with the text " * cough *".
This is then sent spam that repeatedly . In addition, you can hear in the game itself all the time the sound of coughing men , what will probably live off many players to the nerves.
The hacker probably wants to draw attention with this action on an existing vulnerability of Garry 's Mod . And deservedly so : If a player comes to an infected server, it is immediately infected with the virus , and vice versa - when an infected player goes on a "clean " server is downloaded to the server , the virus also . If a hacker would have used this method for a malicious virus would probably have been fatal damage . That's why the players the sandbox title can rejoice: Thanks to the virus an update for Garry 's Mod was today, on April 20, 2014 published that these vulnerabilities should close .
The inventor and developer responded two days ago , on April 18 to the first advent of the virus and assured on Twitter that they will fix the vulnerability quickly, which also happened today.


Does anybody know how this exploit works/worked? (it's allegedly fixed - but maybe it's not :D)

Regards,
Nestade

PS: Sorry, didn't know where I should open this thread.
valve's new file distribution service which they updated recently allowed users to spread files in garrys mod to an admin client which then sends it to the server's database which would then in turn send it to all connected clients. in this case it was a dll and lua file which spammed cough to your steam friends and the server, changed your name and then deleted itself after 10 hours. the virus spread itself to any other players on with an infected client, it was made to alert garry to the exploit and so it was patched very quickly, rendering it useless to think about using now.
Yeah but that person could of done so much more if he wanted to wow.
What a waste of an exploit...all those gaming computers...


Possibly Related Threads...
Thread / Author Replies Views Last Post
by smartmemberDec 2, 2016 06:10 AM 5 283 Dec 2, 2016 06:10 AM
Last Post: smartmember
by theblackdev1lJun 14, 2015 03:43 PM 7 341 Jun 14, 2015 03:43 PM
Last Post: Kiddie
by lavalemonDec 9, 2013 12:16 AM 0 80 Dec 9, 2013 12:16 AM
Last Post: lavalemon