Author Topic: What happend to renderman v4? (Read 1508 times)

BlueBoy362 · July 15, 2015, 02:56:38 PM

I was about to host a renderman AND prepper hunting server. But when I checked my Add-Ons it was gone! Only to find that the renderman v4 thread was moved to the fail bin. Why was it moved there? What happened? Why can't I use it? (Sorry if English/grammar sucks .-.)

Ad Bot · Advertisement

gebenuwell · July 15, 2015, 03:01:17 PM

it had some script that allowed you to spam servers or something

Bester Bageler · July 15, 2015, 03:05:23 PM

Quote from: Badspot on July 01, 2015, 07:59:01 PM

r1966

You can no longer execute files named "Support_AdminEvents.cs" - this user created script was used in several other add-ons and contained an eval injection vulnerability which would allow an attacker to execute arbitrary script code on the server. Note: this was not a malicious script, it was simply poorly coded and could be exploited to attack the server.

These add-ons are known to have contained the vulnerable script:
Server_ServerMusic
Support_Rendermen

If you hosted a server with using these add-ons, you should change admin password (if you use one). You may also want to check over your Blockland files as an attacker could have modified them. I am not sure if any persistent attack was deployed, but you could search your Blockland folder for .cs files, sort by modified date, and check over the latest ones to be sure.

chrisbot6 · July 16, 2015, 01:55:21 PM

I released a fix. Not sure where that went.

I still have the files, but I think the fixed Support_AdminEvents.cs script will be nameblocked now.

BlueBoy362 · July 17, 2015, 07:33:49 PM

Quote from: chrisbot6 on July 16, 2015, 01:55:21 PM

I released a fix. Not sure where that went.

I still have the files, but I think the fixed Support_AdminEvents.cs script will be nameblocked now.

Wheres the Add-On?

Greek2me · July 17, 2015, 10:07:15 PM

Quote from: chrisbot6 on July 16, 2015, 01:55:21 PM

I released a fix. Not sure where that went.

I still have the files, but I think the fixed Support_AdminEvents.cs script will be nameblocked now.

No, it's CRC blocked. Use the fixed version if it and it will work.

BlueBoy362 · July 18, 2015, 11:01:42 AM

Quote from: Greek2me on July 17, 2015, 10:07:15 PM

No, it's CRC blocked. Use the fixed version if it and it will work.

Where is the fixed version?!

Cypthon · July 18, 2015, 11:28:56 PM

Quote from: BlueBoy362 on July 18, 2015, 11:01:42 AM

Where is the fixed version?!

I reposted it, thank Setro for fixing it up.
Go to addons and redownload it, unless you want a better version with Eval..