Unreal Security Hole
Screaming Lunatic writes "There seems to be a big security hole in the Unreal engine that has been around for about 5 years. It affects servers for a number of games and operating systems, including Linux (which accounts for about 40% of UT2003 servers). Epic has been working on a patch for about 3 months. Imagine the bad publicity games would receive if a worm on the scale of Slammer had been created." A Bugtraq post from Thor Larholm of Pivx,
says that Marc Rein of Epic threatened PivX with "getting
our lawyers involved with this"; the TechTV article Larholm cites (the same one linked from this submission), however, contains no
mention of legal action. Rein nonetheless apologized for "those completely unfortunate comments" in a followup message to Bugtraq.
I mean that. I simply can't believe it.
Did PivX bother to notify any of the licensees that their games were exploitable?
Report the REAL security holes, dagnabbitall!
"But the cars are all flashing me, bright lights are passing me, I feel life passing me by" - Stiff Little Fingers
Well, if the security hole is unreal, then why are we worrying about it? The definition of unreal is non-existent... Oh, wait, you're talking about the GAME unreal! My mistake :-)
now they're posting FAKE security holes... Unreal Security Hole
~Jon
This space for rent, inquire within.