Jedi Academy Mod exploit gives cheaters admin powers

[Amidala from Chop Shop]

There is an exploit that allows cheaters to take over servers running Jedi Academy Mod 1.3-1.5 (I believe, my server running 1.4 was attacked) and use admin powers to give themselves empowerment and terminator, and abuse players with punish, slap, sleep, kick, etc. They do not need a password so changing passwords doesn't stop them.

There is a program that spots these cheaters and automatically kicks them. It is available here.

I have had to ban over 40 IP addresses to keep these people out.

I have heard that the mod's author cHoSeN oNe is aware of the problem and is working on a fix.

[griff38]

Hey AA. Glad u banned the bstrds.

I have been playing at the VIPER servers as well as yours and they got hit like you did. Someone managed to ban ALL the Viper regulars for days. Like you the admin takes email from players and was aware and corrected the problem eventually.


Thanks for the info please keep us posted.

[griff38]

POST SCRIPT. What is the chance you could post or provide that list of banned names?


Just FYI

[Amidala from Chop Shop]

The names aren't useful because they are aliases (Padawan, etc.) and the hackers changed them frequently trying to escape being caught.

If you want I could email you the IP addresses.