Mic80000
02/09/2006, 10h51
Bonjour
Je viens de prendre possession du server #436 (Enemy Territory / Jaymod).
2 Questions :
Compte tenu des failles de sécurité dans la version 2.60 du jeux ET. Comptez vous mettre le place le patch 2.60b ?
We have had several reports that people are actively exploiting the download vulnerability that exists in et prior to 2.60b and ETTV prior to beta-10. This exploit allows that to download your server.cfg files (and thus obtain your passwords) and depending on your server configuration, may allow them to download other sensitive files outside of the et directory.
Anyone running a server with downloads enabled should update to 2.60b or the latest ettv.
you DO NOT have to update to the new etpro, or require the clients to update. Just update the server.
The bug: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-2082
ET 2.60b binaries (all platforms): ftp://ftp.idsoftware.com/idstuff/et/ET-2.60b.zip
La version Jaymod actuellement livrée avec le serveur est la 1.4. Est il possible de mettre en place la version 2.0.2 (disponible ici : http://jaymod.clanfu.org )D'avance, merci de vos réponses.
Je viens de prendre possession du server #436 (Enemy Territory / Jaymod).
2 Questions :
Compte tenu des failles de sécurité dans la version 2.60 du jeux ET. Comptez vous mettre le place le patch 2.60b ?
We have had several reports that people are actively exploiting the download vulnerability that exists in et prior to 2.60b and ETTV prior to beta-10. This exploit allows that to download your server.cfg files (and thus obtain your passwords) and depending on your server configuration, may allow them to download other sensitive files outside of the et directory.
Anyone running a server with downloads enabled should update to 2.60b or the latest ettv.
you DO NOT have to update to the new etpro, or require the clients to update. Just update the server.
The bug: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-2082
ET 2.60b binaries (all platforms): ftp://ftp.idsoftware.com/idstuff/et/ET-2.60b.zip
La version Jaymod actuellement livrée avec le serveur est la 1.4. Est il possible de mettre en place la version 2.0.2 (disponible ici : http://jaymod.clanfu.org )D'avance, merci de vos réponses.