EQDKP vulnerability

[Lital]

If your guild is running eqdkp, you need to have the admin disable the backup/restore functionality from the control panel that is enabled by default.

exploit -> http://milw0rm.com/exploits/3252

Of course, if you know a guild that you hate is running EQDKP, have fun.

Lital

 

[Fry]

I can just imagine the drama this is causing.

Fry.

 

[thez]

That was fixed a while ago. For older versions, it might still be possible, though.

 

[Lital]

That was fixed a while ago. For older versions, it might still be possible, though.

Works against the latest version default install. No patch yet. Our wow guild was hit 2 days ago, and he got the station/pass for our guild leaders wow account due to our guild leaders lazy use of the same user/pass in multiple places. Our guild was disbanded, dude was on pvp'ing with the guild leaders account, it was some funny shit.

Lital

 

[Larsen]

Delete the backup.php file, that solves the problem. There are other better backup scripts included with EQ DKP so you shouldn't be using that one anyway.

Dev's say they are currently working a fix, but getting rid of the file will stop anything bad happening.

 

[Lital]

This benefits are so great, who cares about security. Lol at the author.

Comments from the top of backup.php in the current source download...

/*****************************
* EQdkp
* Copyright 2002-2003
* Licensed under the GNU GPL. See COPYING for full terms.
* ------------------
* backup.php
* Began: Mon May 23 2005
*
* $Id: backup.php 6 2006-05-08 17:11:35Z tsigo $
*
*
* class-1 MySQL Backup/Restore
* (c) class-1 Web Design (http://www.class1web.co.uk), 2004
* This file is part of class-1 MySQL Backup/Restore.
*
******************************/

// First things first - a small amount of security
// This script is *so* hackable as to not be funny
// The possible benefit (IMO) outweighs the possible security
// issue with referrer hacking tho...

// Check that the visitor's referrer was a page within your own site.
// Copyright 2001 Tim Green
// http://www.dwfaq.com/snippets/snippet_details.asp?SnipID=51

Lital