Heads up.... Security warning to the cod4 community

[BFV Server Fund]

BFV Server Fund

February Goal: $41.00
Due Date: Feb 28
Total Receipts: $0.00

 0%

[rip|MightyMax]

Community members have recently decompiled modifications and maps created by community scripter, mapper, and modder KiLL3r and discovered a number of security flaws...

A backdoor allowing users with access the ability to retrieve the RCON password of any server using the map or mod.  

An aimbot imbedded within the code.

If you have any of these mods and or maps installed on your system, I would suggest that you delete them.

Mods:
-K3
-Ion Cannon Mod
-Freeze Tag mod
-iBAS Beta 1.1 Mod
-UO Zombie Mod

Maps:
-Q3CTF3
-WAWA
-Maze1
-Backlot Night
-Rat House


Our server has never installed or run any of the above mods or maps.


The developer has also been banned globally ... " Violation:(MALICIOUS DEVELOPER) "

The first of this type of ban..  [smilie=shockwhore.gif]

http://www.pbbans.com/mbi.php?action=5&ban_id=70504


BTW..   He is a 16 year old kid ...  

Here is a quote from him from over at http://forums.raidersmerciless.com

Posted by KiLL3R
if you run the K3 mod on your server and i join it then tells me your server's rcon password... thats it, nothing harmful

That should explain it all ....   nothing harmful?  lol



If you have any questions about this or on how to remove the offending code, just ask.

[rip|buzinator]

Holy crap Batman!

[rip|mrkavanagh]

aww man rat house is awesome or is it rat room i am thinking of

[rip|Bigmike7766]

yeah its rat house. you know people are just plain stupid anymore, must be somethin in the water :roll:

[rip|forkev]

ouch

nice find MightyMax