Halo CE Vulnerability Patches

darkspreader · **Joined:** 23 Aug 2008 00:15 **Posts:** 5

Hello, firstly I would like to say that I am completely fascinated with all the stuff that you have done, Luigi, particularly with the Halo Proof-of-Concepts. However, these vulnerabilities have started to become a problem with my dedicated server. I have a Halo CE 1.006 dedicated server, and I actually already have a patched .exe that fixes Haloboom, Haloloop, and Haloloop2. I was wondering, is it hard to provide a patch that also fixes Haloloop3? I have sort of an "underground" community for 1.006 players, and it would be hard to make everyone update to 1.08.

Thanks in advance.

aluigi · **Posted:** 23 Aug 2008 00:41

I think you can find more info or ideas here:

http://goemitar.wordpress.com/2008/08/2 ... n-changer/

using any version which is not 1.08 is a risk due to the various bugs which affect them

darkspreader · **Joined:** 23 Aug 2008 00:15 **Posts:** 5

Interesting...

So, if I updated my dedicated server to 1.08, people can download that version switcher and change from 1.00 to 1.08 on the fly without any problems whatsoever?

I think this has convinced me enough to update to 1.08. Thanks Luigi! The only downside is trying to tell everyone to get the version switcher... oh well, sacrifices must be made for the greater good. :D

aluigi · **Posted:** 23 Aug 2008 01:12

the idea I had in mind (as I suggested also in another thread) was exactly the opposite: the clients continue to use their old version and the server is a 1.08 but "looks" like a 1.06 or another version

omegga · **Joined:** 27 Jun 2008 10:22 **Posts:** 8

Like Luigi says, the best thing is to use the 1.08 server but change the version of it to 1.00. Halo uses 2 methods to send version info:

1) An ASCII string that is used to filter the server list in the halo lobby.
2) A number that is used/compared when you join a server.

(More actually. The client also reads your register, it's used in the automatic update check. And the "gamename" send to gamespy [halor/halom]).

But that's the technical side. I'm currently on an old computer and can't make this quick fix for you. Wait a few days or wait for "iMega". It's a server tool for halo and will let you change the version used with a console command.

Oh and thanks Luigi for giving me the idea of making a version switcher. The post you made about making a 1.07 server look like a 1.06 gave me the idea :).

aluigi · **Posted:** 23 Aug 2008 16:25

wow 8-)

darkspreader · **Joined:** 23 Aug 2008 00:15 **Posts:** 5

Ok, so how hard is it to trick a 1.08 dedicated server exe to think it's version 1.00? Is it something I can do, or should I wait for someone more experienced like you to make one? I've looked at the coding of the exe, but never really done anything to it, except for changing the version hex number from 615 to 609, which failed miserably, lol.

darkspreader · **Joined:** 23 Aug 2008 00:15 **Posts:** 5

Not trying to be a jerk or anything, but omegga, have you had any progress on that fix?

omegga · **Joined:** 27 Jun 2008 10:22 **Posts:** 8

Download quickfix here: http://files.filefront.com/haloceded+10 ... einfo.html

darkspreader · **Joined:** 23 Aug 2008 00:15 **Posts:** 5

You. Are. Awesome.

You can add me to your list of fans if you want. :D

jliba2004 · **Joined:** 01 Nov 2009 03:11 **Posts:** 1

Darn it the link is broken...
Omega.
Could you put another one?

Luigi Auriemma

Halo CE Vulnerability Patches