Security Tips

08/19/2011 00:58 requeson2008#1
what do you know about files security? .sg is hacking my server, i have hardware firewall, ipw, ipwf, sys cookie, corei7 in ovh, freebsd 64bits but .sg people still crashing me, 2 days ago they hack my host and deleted everthing, i save the DB i was using freebsd 32bits with pae, i dont know what more do to stop the atacks, any tips is welcome, im using 2010 files by tim

thanks!
08/19/2011 01:40 LuckyTabak#2
It's a Backdoor in your Gamecore.

How to fix it?

Here:
[Only registered and activated users can see links. Click Here To Register...]
08/19/2011 01:49 requeson2008#3
and the 2089 files have it too? because i used it in other host and they hacked me too!
08/19/2011 09:45 socressor#4
Quote:
Originally Posted by requeson2008 View Post
and the 2089 files have it too? because i used it in other host and they hacked me too!
yes there is an exploit.. try to fix it with this dif here

PHP Code:
This difference file has been created by The Interactive Disassembler

game
000E19B6: 05 00 
or this

PHP Code:
This difference file is created by The Interactive Disassembler

game
000E0FDB: 09 03
000E1030: C6 8B
000E1031: 82 45
000E1032: B8 FC
000E1033: 0B 33
000E1034: 00 05
000E1035: 00 D8
000E1036: 05 36
000E1037: EB 4A
000E1038: C7 08
000E1039: 90 75
000E103A: 90 10
000E103B: 90 C7
000E103C: 90 45
000E103D: 90 0C
000E103E: 90 00
000E103F: 90 00
000E1040: 90 00
000E1041: 90 00
000E1042: 90 89
000E1043: 90 55
000E1044: 90 08
000E1045: 90 C9
000E1046: 90 E9
000E1047: 90 85
000E1048: 90 B1
000E1049: 90 F4
000E104A: 90 FF 
08/19/2011 17:28 requeson2008#5
what do you say about this in logs

logs for game1:
Loaded symbols for /libexec/ld-elf.so.1
#0 CItem::GetCount (this=0x59670800) at item.cpp:205
205 item.cpp: No such file or directory.
in item.cpp
[New Thread 28802174288b5d80 (LWP 100182)]
[New Thread 285e3a00288b5ec0 (LWP 100137)]
[New Thread 288b5db4288b6140 (LWP 100133)]
[New Thread 288b5ef428802140 (LWP 100309)]
Cannot find new threads: generic error

game2:
Reading symbols from /libexec/ld-elf.so.1...done.
Loaded symbols for /libexec/ld-elf.so.1
#0 std::_Rb_tree<CEntity*, CEntity*, std::_Identity<CEntity*>, std::less<CEntity*>, std::allocator<CEntity*> >::find
(this=0x68635f76, __k=@0xffffa3e0) at stl_tree.h:475
475 { return static_cast<_Link_type>(this->_M_impl._M_header._M_parent); }
[New Thread 28802174288b5d80 (LWP 100326)]
[New Thread 285e3a00288b5ec0 (LWP 100306)]
[New Thread 288b5db4288b6140 (LWP 100212)]
[New Thread 288b5ef428802140 (LWP 100301)]
Cannot find new threads: generic error

game3:
Loaded symbols for /libexec/ld-elf.so.1
#0 std::_Rb_tree<CEntity*, CEntity*, std::_Identity<CEntity*>, std::less<CEntity*>, std::allocator<CEntity*> >::find
(this=0xffff91f8, __k=@0xffffa3e0) at stl_tree.h:1376
1376 if (!_M_impl._M_key_compare(_S_key(__x), __k))
[New Thread 28802174288b5d80 (LWP 100351)]
[New Thread 285e3a00288b5ec0 (LWP 100342)]
[New Thread 288b5db4288b6140 (LWP 100337)]
[New Thread 288b5ef428802140 (LWP 100255)]
Cannot find new threads: generic error


Are you ever used this files in freebsd 8,2?