-Known Bugs in LambdaCore 1Oct94-

$login:maybe_print_lag has an unprotected notify(player) call.

How to Exploit:
You can use this verb in a :tell or something to notify() a player with
 lag readings hundreds of times, and since it uses notify() it can't be
 @gagged or otherwise circumvented. (perhaps a user's client could, but
 not in the MOO.)


How to Fix:

This verb should only be run with wizard permissions, so you need to put a
set_task_perms(caller_perms())
at the beginning of the verb.

-7-
[Previous Page][Next Page][Contents]