Forum Overview :: Motherfucking News

Possible Exploit in Unreal engine by Motherhead 02/12/2003, 8:47am PST While dicking around google trying to figure why Unreal 2 hated me so much I stumbled across this, sorry if it is old news to some. Bugtraq runs an article on the Unreal engine being vulnerable to DoS and DDoS attacks. It also got picked up by Blue's News and TechTV. Epic Denies everything: "This is slanderous," he (Mark Rein) says. "They've taken this too far. We're getting our lawyers involved with this." Rein says the only vulnerabilities he knows about affect "Unreal" servers. Rein denies that any holes affect the machines of end users or "Unreal" players. "I don't understand how they could [run code on a user's machine]," he says. "From what I understand, this only has to do with servers and can only perform a DDOS attack." and also releases a patch that also "addresses" the issue: "Last Wednesday, we produced an 'Unreal Tournament 2003' patch we've had in testing that solves all of the reported client-side 'malicious code' exploits and server exploits. We also immediately made this available to all of the Unreal Engine licensees for incorporation into their future patches and full game releases," (Tim) Sweeney says. "The patch is in testing with the community, and release is imminent. We're aiming for Wednesday unless testing reveals additional problems. We're testing as fast as we can." (From the TechTV article:) Some of the more popular computer games that PivX claims are affected by the Unreal Engine flaw include: * "Star Trek: The Next Generation: Klingon Honor Guard" * "Unreal" * "The Wheel of Time" * "Deus Ex" * "Mobile Forces" * "Rune" * "Unreal Tournament" * "Hired Guns" * "Navy Seals" * "TNN Outdoor Pro Hunter" * "Werewolf" * "X-Com: Alliance" * "Adventure Pinball" * "America's Army" * "Unreal Tournament 2003" Since most of us here are using DSL/ADSL or Cable and own at least "TNN Outdoor Pro Hunter," I figured it might be of interest. I was wondering what SB thought as well. Since you've forgotten more about this shit then I'm ever going to know.

Possible Exploit in Unreal engine by Motherhead 02/12/2003, 8:47am PST     Re: Possible Exploit in Unreal engine by Ice Cream Jonsey 02/12/2003, 8:54am PST     Corrected links by Motherhead 02/12/2003, 8:58am PST     Competent Implementor Carmack beats Exploits with Year-Long Test; page A3 -nt- by Ray, of Light 02/12/2003, 10:42am PST         That's LEAD Competent Implementor Carmack to you, son. by I need clarification 02/13/2003, 5:15pm PST     Rein apologized for that statement on Bugtraq -NT- by Senor Barborito 02/12/2003, 10:52am PST