Another CS 1.5 crash exploit?

man1ak · **Joined:** 02 Jul 2010 14:22 **Posts:** 5

Hi aluigi, I think that there are a new program for crash HLDS servers p46 :(
The information that I have is the several messages:

HLShield[29633]: old hlboom atack has been rejected from 190.225.50.118
HLShield[29633]: old hlboom atack has been rejected from 190.225.50.118
HLShield[29633]: old hlboom atack has been rejected from 190.225.50.118
HLShield[29633]: old hlboom atack has been rejected from 190.225.50.118
HLShield[29633]: old hlboom atack has been rejected from 190.225.50.118
- Packet split attack from 190.225.50.118

... and next inmediately crash.

I have installed the following fixes:
- hlds_20040707fix.so (v 0.2)
- hlshield 2.10 + hlshield 1.14
- crashfix_p46.so
- nowon.so

Thanks in advance

NeoCortex · **Joined:** 01 Jun 2010 05:58 **Posts:** 18

Apart from that there's a typo in HLShield (aTtack) thats not realy much information.

man1ak · **Joined:** 02 Jul 2010 14:22 **Posts:** 5

I think that the attacker is using a modified version of hlboom, since HLShield and hllinfix are alerting before the server crashes.
HLShield is alerting from an "old hlboom" attack (hlboom was made by aluigi) and hllinfix.so (fix made by aluigi) is alerting from a packet split, so I beleive that the attack could be a similar version of these programs.

daemon · **Joined:** 17 Feb 2011 17:46 **Posts:** 1

my problem is same, how fix?. Any solution?

Luigi Auriemma

Another CS 1.5 crash exploit?