Luigi Auriemma

aluigi.org (ARCHIVE-ONLY FORUM!)
It is currently 19 Jul 2012 11:59

All times are UTC [ DST ]





Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 6 posts ] 
Author Message
 Post subject: Ventrilo 3.0.3 Vulnerabilities?
PostPosted: 28 Aug 2008 15:31 

Joined: 18 Aug 2008 22:17
Posts: 9
I was wondering has anyone found any vulnerabilities in ventrilo version 3.0.3? To me it seems to be pretty watertight, the ability to connect under proxies has been removed and the NULL pointer exploit was fixed aswell.


Top
 Profile  
 
 
 Post subject: Re: Ventrilo 3.0.3 Vulnerabilities?
PostPosted: 28 Aug 2008 21:54 

Joined: 09 Apr 2008 08:06
Posts: 66
Location: USA
i cant even use the fake players bug with it i tried and it would always say this.

Player:
- connection interrupted by the server, probably it uses a different protocol

- server full or players_per_IP limit reached or something wrong
- wait to retry:
4

Also tcpfp works with it but like now it disconnects automatically so u cant flood it any more lol. Wow i guess ventrilo finally figured out a way to fix things? haha

I wonder why they didnt release the update i mean atleast they could say fixed a few bugs or something lol.


Top
 Profile  
 
 Post subject: Re: Ventrilo 3.0.3 Vulnerabilities?
PostPosted: 28 Aug 2008 22:57 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
the "private release" of the fix is something not new from Flagship, they did the same 3 years ago when I found the NULL pointer in the UDP status code


Top
 Profile  
 
 Post subject: Re: Ventrilo 3.0.3 Vulnerabilities?
PostPosted: 28 Aug 2008 23:20 

Joined: 18 Aug 2008 22:17
Posts: 9
I wonder why they made it a private release. They seem to want to hide the problem ( they're also deleting threads in the official Flagship forum concerning the 3.0.2 NULL pointer...


Top
 Profile  
 
 Post subject: Re: Ventrilo 3.0.3 Vulnerabilities?
PostPosted: 28 Aug 2008 23:27 

Joined: 09 Apr 2008 08:06
Posts: 66
Location: USA
i must say Flagship is pretty weird lol but damnit i still wished the vent fake players would work lol but it doesnt so idk i guess i gotta sit here wait with my fingers crossed hoping aluigi some how makes a new one hehe :D.


Top
 Profile  
 
 Post subject: Re: Ventrilo 3.0.3 Vulnerabilities?
PostPosted: 29 Aug 2008 12:51 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
the only way to avoid fake players is setting the Duplicate option to 0, probably this new private version has it as default


Top
 Profile  
 
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 6 posts ] 

All times are UTC [ DST ]


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for: