mangos zero [urgent] authentication bypass

[Cylae]

Hello,

 

After few tests I can confirm that this software is able to bypass auth with method 2 with the lastest commit :

https://github.com/namreeb/wowned/releases

Commit used to fix it : https://github.com/cmangos/mangos-classic/commit/0d2b7e38c886ddd6828cfa75e2daba5121467383

 

[madmax]

I've passed this onto the dev team, thanks

[antz]

7 minutes ago, Cylae said:

Hello,

 

After few tests I can confirm that this software is able to bypass auth with method 2 with the lastest commit :

https://github.com/namreeb/wowned/releases

Commit used to fix it : https://github.com/cmangos/mangos-classic/commit/0d2b7e38c886ddd6828cfa75e2daba5121467383

 

You perhaps need to commit on namreeb's repo then as his 'fix' clearly doesn't work as it's already applied...
https://github.com/mangos/realmd/blob/09bc00fb9653b3da8d84b75ec1488636154617b7/Auth/AuthSocket.cpp#L604