Zero Hour ATX/AT3 Hack Patch your scripts

**Spunky** · 01-12-2007, 04:08 PM

Was it similar to the TM3 attack?

**spasmo** · 01-12-2007, 04:15 PM

Originally posted by Spunky

Was it similar to the TM3 attack?

The only public info I've seen is that you should be on the look out for "strange" new trades that contain exploit code in the email sent to you when the new trades sign up.

**MrVids** · 01-12-2007, 04:21 PM

thanks for the heads up
patched mine this morning, should have made a post myself

**fris** · 01-12-2007, 04:24 PM

big heads up, hope they notified everyone by email

**Spunky** · 01-12-2007, 04:24 PM

Cool..thanks for the info Spasmo

**spasmo** · 01-12-2007, 04:27 PM

Originally posted by Fris

big heads up, hope they notified everyone by email

They did, in a way. I received notification via email, and though it was from Aheib, it was using the broadcast mailing list from another site you likely frequent.

**GrouchyAdmin** · 01-12-2007, 04:55 PM

Not sure if this affects other builds, but I just sent them an email:

Anyone using the CentOS 4 version of AT3 (at least) will see their admin works, but if they go to the settings page, it bitches about a missing file. This is (mostly) ok.

Create an empty file in notepad (or touch on UNIX), named 'informer.dat'. Upload or move to your at3-install/d directory. admin.cgi works again.

I'm betting they left debugging on by mistake; there's no use of 'd/informer.dat' in any previous build of admin.cgi.

**spasmo** · 01-12-2007, 05:00 PM

It didn't happen to me on FC4, but he whipped those out in a hurry. He's getting some sleep before doing Mandrake and the others he didn't get to.

Thanks much for the tip.

**xApster** · 01-12-2007, 05:56 PM

thank god for http://www.swiftwill.com

**abshard** · 01-12-2007, 06:02 PM

Originally posted by toonpornblog

Not sure if this affects other builds, but I just sent them an email:

Anyone using the CentOS 4 version of AT3 (at least) will see their admin works, but if they go to the settings page, it bitches about a missing file. This is (mostly) ok.

Create an empty file in notepad (or touch on UNIX), named 'informer.dat'. Upload or move to your at3-install/d directory. admin.cgi works again.

I'm betting they left debugging on by mistake; there's no use of 'd/informer.dat' in any previous build of admin.cgi.

If you upgraded to build 12 of at3 you should have the 'd/informer.dat'

bottom of the page http://www.arrowscripts.com/atl3_dl.shtml

**woj** · 01-12-2007, 06:21 PM

Originally posted by xApster

thank god for http://www.swiftwill.com

**GrouchyAdmin** · 01-12-2007, 06:35 PM

Originally posted by abshard

If you upgraded to build 12 of at3 you should have the 'd/informer.dat'

bottom of the page http://www.arrowscripts.com/atl3_dl.shtml

How strange; I checked my upgrade package, and nope, it wasn't in there. Guess I might have grabbed it at a slightly-off build? Who knows. Thanks for the head's up, it IS in this fresh download. Fixed, and reapplied the new CGIs.

**com** · 01-12-2007, 09:26 PM

rofl zero hour... sorry guys.. this is comedy

Zero Hour ATX/AT3 Hack Patch your scripts