this from viper
Hey bud, just to let you know there is a bad hack being used to access servers running TAM 257 and 3.0. This hack allows the hacker to gain control of web admin on the server and do all sorts of nasty stuff. You can read more of this at http://www.unrealadmin.org/forums/showt ... hp?t=16042
Wormbo has released a fix for 257 and the guys at 3SPN have released TAM 3.10. I would highly recommend patching to either or both. If you are using your server for TWL TAM ladder matches I would recommend the 257 fix, since they still require 257 for ladder matches. This is a server side only fix. There is a hitch: Once applied to the server anyone who logs onto the server will download the 3SPN257.u fixed file. Since I WILL NOT be redirecting the file for security purposes the download will go over 100%. The work around for this is for folks to install TAM 257 on their client (if they haven't already). They can pick that up at http://www.vipersservers.com/downloads.htm at the bottom of the page. Just install it on your client just as you would any mutator. No need to edit your ini.
If you are NOT using your server for TWL TAM matches I would recommend deleting all previous versions of TAM and installing TAM 3.10. It is already redirected.
Let me know what you want to do ASAP. Once a server is compromised you will have to change all your admin logins and passwords.
tam hack
Moderator: ForumModerators
- Porkinator
- Posts: 2087
- Joined: Wed Feb 15, 2006 7:47 pm
- Location: none of your damn business
- pewterdragn
- Clan Leader
- Posts: 1614
- Joined: Wed Dec 31, 1969 7:00 pm
- Location: Michigan
- Contact:
- law.of.averages
- Posts: 1755
- Joined: Sun May 15, 2005 7:24 pm
- Location: Beautiful, Sunny Florida
- pewterdragn
- Clan Leader
- Posts: 1614
- Joined: Wed Dec 31, 1969 7:00 pm
- Location: Michigan
- Contact:
This is a quote from Wormbo on unrealadmin.org:
I will be following his instructions and putting the file on our redirect for fast downloading. Cross your fingers.
Admins: Please report anything to me immediately if you find one of our servers has an issue. I don't think we've been compromised at this point.
Wormbo wrote:If you are using 3SPN v2.57 I can provide an unofficial fix for the exploit: Download
This ZIP file contains a drop-in replacement for the original 3SPNv257.u and only needs to be present on the server to work. I suggest keeping the original file on the redirect so clients do not get this unofficial recompiled version. The original and this modified version are compatible to each other (like UT2004 patches), unless an anti-cheat tool performs MD5 checks and expects only one version.
Again: Keep this file on your server and let clients download the original version via redirect! I don't want to see any complaints concerning MD5 mismatches because the server sent the modified file instead of the official one! This fix was not released or created by 3SPN, hence "unofficial".
To install, shut down your server or switch to a gametype other than TAM/AM. Extract 3SPNv257.u from the ZIP file into your server's System directory, overwriting the existing file. Restart your server and switch back to TAM/AM and you're done. Every time someone tries to exploit the bug, he will broadcast the chat message "I tried to hack the server!" and the server will log the player's nick, IP and GUID to "UserLogs/3SPN_Abuse.log". Feel free to send the information gathered in that file to Epic's abuse email address or use it yourself to contact the hacker's ISP and hopefully get his internet access suspended.
As mentioned before I highly recommend changing ALL your passwords and making sure there's no additional admin account created by a hacker if you're using advanced admin. Remember changing passwords on other servers as well if they are the same as on the compromised server!
[edit]
Quote:
[00:51:48] <`Piglet> Putting the original version on the redirect means that if there's a new client without TAM it gets the redirect version fast and then the serverside version very slowly...
So better put the new version on redirect.
I will be following his instructions and putting the file on our redirect for fast downloading. Cross your fingers.
Admins: Please report anything to me immediately if you find one of our servers has an issue. I don't think we've been compromised at this point.
1337 (_)И][× HàЖØ®§ p\/\/И
- pewterdragn
- Clan Leader
- Posts: 1614
- Joined: Wed Dec 31, 1969 7:00 pm
- Location: Michigan
- Contact:
TAM 2.57 Servers Patched
Ok all,
The TAM servers are back online with the security patches and the redirect is enabled. If you do not want to use the redirect I recommend using the DOWNLOAD link in Wormbo's quoted post above to get the right version.
Please let me know if you have problems.
The TAM servers are back online with the security patches and the redirect is enabled. If you do not want to use the redirect I recommend using the DOWNLOAD link in Wormbo's quoted post above to get the right version.
Please let me know if you have problems.
1337 (_)И][× HàЖØ®§ p\/\/И
- law.of.averages
- Posts: 1755
- Joined: Sun May 15, 2005 7:24 pm
- Location: Beautiful, Sunny Florida
Re: TAM 2.57 Servers Patched
pewterdragn wrote:Please let me know if you have problems.
How big is your PM box?
![Laughing :lol:](./images/smilies/icon_lol.gif)
Once, again..thanks chief!
![Image](http://fun.fiorellonj.com/images/lawsride.jpg)
- pewterdragn
- Clan Leader
- Posts: 1614
- Joined: Wed Dec 31, 1969 7:00 pm
- Location: Michigan
- Contact:
Re: TAM 2.57 Servers Patched
law.of.averages wrote:How big is your PM box?![]()
oh shit!
![Wink :wink:](./images/smilies/icon_wink.gif)
1337 (_)И][× HàЖØ®§ p\/\/И
- Sideous Prime
- Clan Leader
- Posts: 1564
- Joined: Sun Jan 23, 2005 7:46 pm
- Location: Iacon, Western Province
- Contact:
- Porkinator
- Posts: 2087
- Joined: Wed Feb 15, 2006 7:47 pm
- Location: none of your damn business
![Salmon Slapping :salmon:](./images/smilies/salmon.gif)
~Aly~ aka -MLH-Tig Thank you again
![Exclamation :!:](./images/smilies/icon_exclaim.gif)
![Very Happy :D](./images/smilies/icon_biggrin.gif)
Who is online
Users browsing this forum: No registered users and 17 guests