Tuesday, December 02, 2008
USERLOGIN PASSWORD Remember?
  search
You are here » Learning Center ยป Forums

Openlife Forums

 Openlife Grid Forums
Minimize
 
  Openlife Forums  Scripting  LSL Discussion  C# Security
Previous Previous
 
Next Next
New Post 4/29/2008 5:31 AM
User is offline RxCage
1 posts
Openlife Newbie


C# Security 

Greetings!

First, incredible job on OS Dev team.

We've noticed a wave of stability since 4200 or so.

Regarding I want to let you know there is a huge security hole in OpenSim. The ability to use C# and System libs will allow in world scripts to view and or save data to sim hosting machine. In addition, a simple: ReadLine() will cause the OpenSim.exe to crash on first <return> on console. 

Running 4387, kubuntu 7.10

 

 

 
 
New Post 5/7/2008 10:21 PM
Online now... Pyotr Wolf
66 posts
xyrophile.com
Openlife Apprentice


Re: C# Security 

whoa... the scripting engine isn't parsing out library calls?  even filesystem libs?

that IS a security hole... a MASSIVE security hole.  maybe the script engine needs to be virtualized?

true, security isn't one of the opensim project's main goals right now, but this seems to be pretty significant.  have you contacted the devs at http://opensimulator.org/ ?
 
New Post 5/15/2008 7:20 AM
User is offline Nic Loeher
3 posts
Openlife Newbie


Re: C# Security 

oh strange!
 
 Page 1 of 1
Previous Previous
 
Next Next
  Openlife Forums  Scripting  LSL Discussion  C# Security
Print  
 Popular Forum Threads
Minimize
In the past 1 week, we have 54 new thread(s) and 291 new post(s)
The most popular thread has been Draft FAQ Notecard for New People
The most active thread has been Proposal: A real exchange for Open Life Credits
Privacy Statement | Terms Of UseAll Rights Reserved 2007,2008 3DX - Openlifegrid.com