Ventrilo 3.0.3 Vulnerabilities?

Mr T · **Joined:** 18 Aug 2008 22:17 **Posts:** 9

I was wondering has anyone found any vulnerabilities in ventrilo version 3.0.3? To me it seems to be pretty watertight, the ability to connect under proxies has been removed and the NULL pointer exploit was fixed aswell.

DeFRaG · **Posted:** 28 Aug 2008 21:54

i cant even use the fake players bug with it i tried and it would always say this.

Player:
- connection interrupted by the server, probably it uses a different protocol

- server full or players_per_IP limit reached or something wrong
- wait to retry:
4

Also tcpfp works with it but like now it disconnects automatically so u cant flood it any more lol. Wow i guess ventrilo finally figured out a way to fix things? haha

I wonder why they didnt release the update i mean atleast they could say fixed a few bugs or something lol.

aluigi · **Posted:** 28 Aug 2008 22:57

the "private release" of the fix is something not new from Flagship, they did the same 3 years ago when I found the NULL pointer in the UDP status code

Mr T · **Joined:** 18 Aug 2008 22:17 **Posts:** 9

I wonder why they made it a private release. They seem to want to hide the problem ( they're also deleting threads in the official Flagship forum concerning the 3.0.2 NULL pointer...

DeFRaG · **Posted:** 28 Aug 2008 23:27

i must say Flagship is pretty weird lol but damnit i still wished the vent fake players would work lol but it doesnt so idk i guess i gotta sit here wait with my fingers crossed hoping aluigi some how makes a new one hehe :D.

aluigi · **Posted:** 29 Aug 2008 12:51

the only way to avoid fake players is setting the Duplicate option to 0, probably this new private version has it as default

Luigi Auriemma

Ventrilo 3.0.3 Vulnerabilities?