Apr 20, 2014 11:02 AM
(This post was last modified: Apr 20, 2014 11:03 AM by xuNsh1ne.)
Hey,
I found this announcement about an exploit in Garry's Mod which allows you to infect players if the join your server.
http://www.shooter-szene.de/content/dive...titel.html
It's German - Google translate:
Does anybody know how this exploit works/worked? (it's allegedly fixed - but maybe it's not :D)
Regards,
Nestade
PS: Sorry, didn't know where I should open this thread.
I found this announcement about an exploit in Garry's Mod which allows you to infect players if the join your server.
http://www.shooter-szene.de/content/dive...titel.html
It's German - Google translate:
Quote:Lately, many minor and major security vulnerabilities are discovered . Now it has also caught the sandbox title Garry 's Mod . But this discovery is different. It happened that is caused by a virus .
The cough virus is different than other viruses. Instead of destroying the PC spy data and paralyze all makes this on a nerve of Garry 's Mod player. If one has captured the virus can suddenly starts all friends in the friends list on Steam a message with the text " * cough *".
This is then sent spam that repeatedly . In addition, you can hear in the game itself all the time the sound of coughing men , what will probably live off many players to the nerves.
The hacker probably wants to draw attention with this action on an existing vulnerability of Garry 's Mod . And deservedly so : If a player comes to an infected server, it is immediately infected with the virus , and vice versa - when an infected player goes on a "clean " server is downloaded to the server , the virus also . If a hacker would have used this method for a malicious virus would probably have been fatal damage . That's why the players the sandbox title can rejoice: Thanks to the virus an update for Garry 's Mod was today, on April 20, 2014 published that these vulnerabilities should close .
The inventor and developer responded two days ago , on April 18 to the first advent of the virus and assured on Twitter that they will fix the vulnerability quickly, which also happened today.
Does anybody know how this exploit works/worked? (it's allegedly fixed - but maybe it's not :D)
Regards,
Nestade
PS: Sorry, didn't know where I should open this thread.

