About Urban terror callvote exploit

[dimitrifrom31]

If you host urban terror servers you may have heard about that exploit that can let any1 change rcon and do modifications of server cvars.

 

Here is a thread about it for those who were not aware (exploit discovered in january 2009) :

http://forums.urbanterror.info/topic/12964-server-exploit/

And here on luigi auriema forum they explain how it works :

http://aluigi.freeforums.org/quake3-engine-callvote-bug-t686-30.html

 

A patch was quickly released but thats for Linux only.

Im working on a windows patch but I need some1 who knows how to use the exploit to check if the patch is working or not. in luigi's forum they give the how to but somehow I cannot seem to reproduce it on a non patched server.

 

If you are interested in testing please answer to this topic

[dimitrifrom31]

topic closed, compiled my own patched binaries.