France servers runs Q3 1.32b. Isn't time to update ?

4 replies [Last post]
6. June 2008 - 12:18
=ANU815=
outeris's picture
Offline
Joined: Feb 2007
Posts:

[quote="Q3 1.32b vs
Q3 1.32c = obvious choice, isn't ?"]
Updated game binary or Quake3 1.32 players. This patch fixes some security issues discovered following id Software's release of the Quake III Arena source code under GPL. The following issues are fixed:
-Ludwig Nussel and Thilo Shulz discovered a vulnerability letting a malicious client download files from a server if auto download is enabled ( sv_allowDownload 1 ).
-A second issue fixed in this release would let a malicious server exploit a buffer overflow to execute a shellcode on connecting clients.

(download links to 1.32c)

Why some clients & some servers admins (like all servers in France) still uses 1.32b. Is those bugs fixes worthless, or maybe is there something more behind that b ? I'm surprised. Isn't time to update ?

*notice "Automatic Downloading" feature should be NEVER enabled, while playing on those servers.

The majority of people think they think, when really they just change their prejudices. Understanding is a matter of will in most cases.

☻ Lietuvių excessiveplus draugija - Lithuanians National Team
☺ Linux (1st E17+Compiz powered ! Built on Debian GNU/Linux.)

MODDB.com all cool things for Quake III Arena @ one place from E+


Top
6. June 2008 - 12:27
#1
kek
Offline
Joined: Apr 2005
Posts:
France servers runs Q3 1.32b. Isn't time to update ?

Hmm I didnt notice that. And since when there is a people's server hosted in France? oO

Better try contacting the server owners personally as well.

Top
6. June 2008 - 12:32
#2
mow Q [EN]
Offline
Joined: Nov 2003
Posts:
France servers runs Q3 1.32b. Isn't time to update ?

because all are nubs, except me

(of course, j/k)

Top
6. June 2008 - 12:45
#3
rUnThEoN?!
Site administrator
Skullheadq3's picture
Offline
Joined: Dec 2005
Posts:
DE Germany
France servers runs Q3 1.32b. Isn't time to update ?

after release of source code, some people discovered a lack in autodownload which let's the client hack the server as far as i know.
so id made a update to 1.32c within 1-2 day's, after 4 Years not making any update Happy
basically, 1.32c is for server, but since it also has smaller size then 1.32b, u can use it for client too Smug

hurrenson: "This idiot is apparently not familiar with a rail/sniper style."

Top
9. June 2008 - 3:19
#4
.Su!.***
Suppo's picture
Offline
Joined: Nov 2006
Posts:
France servers runs Q3 1.32b. Isn't time to update ?

Yep... i'm probably a noob Winking

I should update this (hummm i will) anyway sv_allowDownload is 0 and should always be on FFF servers and other servers i own...

*** update of my post ***

It's 1.32c since... well it is Big grin

Top