CS 1.5 Freezing (new exploit?)

man1ak · **Joined:** 02 Jul 2010 14:22 **Posts:** 5

Hi Luigi, I have a problem with our CS 1.5 server. There are a new exploit that are freezing all servers. The servers are protected with HLShield 2.10 (tried a modified version 2.11 too), no AMX, no sXe or any anticheat.

The attacker connects to the server with names like .??????.???????????? (last name extracted from the console log) before freezing completely the server.
HLShield no detect any attack type and sv_allowdownload is 0

The server version is 46/3.1.1.1 2469 running on Linux

Thank you in advance

aluigi · **Posted:** 26 Jul 2010 16:23

it's just the usual csdos/hlfreeze/headnut bug (tested with hlfill -n ".??????.????????????" SERVER)

indeed with my csdos fix the server is immune:
http://aluigi.org/patches/csdosfix.lpatch

man1ak · **Joined:** 02 Jul 2010 14:22 **Posts:** 5

Luigi, really thank you very much. Your patch works!

Regards

man1ak · **Joined:** 02 Jul 2010 14:22 **Posts:** 5

Sorry for double posting Luigi, but bad news.
I've patched the engine*.so (I'm using engine_i686.so) and I've realized the following tests:

hlfill -1 SERVER: rejected OK
hlfill -2 SERVER: rejected OK
hlfill -3 SERVER: server freezed
hlfill -n ".??????.????????????" SERVER: server freezed

I've read your note in csdosfix.lpatch: IMPORTANT: for the moment the "Born to be pig" fix is available only for
Windows and NOT for Linux!

Anyway, I see that HLShield rejects Born to be Pig bug, but the string .??????.???????????? not

Thank you

aluigi · **Posted:** 27 Jul 2010 08:19

yeah, my patch fixes all the bugs only on Windows.

I suggest you to contact the author of hlshield if you have not done it yet

Luigi Auriemma

CS 1.5 Freezing (new exploit?)