[Full-disclosure] MSNLVADV-2010-001 Security Advisory

[Григорий Братислава <musntlive@xxxxxxxxx>]

______________________________________________________________________
------------------------- MSNLVADV-2010-001 --------------------------

                 MusntLive Lame ASCII ART ADVISORY
______________________________________________________________________
______________________________________________________________________


   || __   ||
   ||=\_`\=||
   || (__/ ||
   ||  | | :-"""-.
   ||==| \/-=-.   \
   ||  |(_|o o/   |_
   ||   \/ "  \   ,_)
   ||====\ U  /__/
   ||     ;--'  `-.
   ||    /      .  \
   ||===;        \  \
   ||   |         | |
  _______\"""'   _/_/
 (~|_______ |  (_  \
   /  .' ( | )   \\_/
  |_ /     |||  |\\
 /  _)=====|||  | ||
/  /|      ||/  / //
\_/||      ( `-/ ||
   ||======/  /  \\ .-.
   ||      \_/    \'-'/
   ||      ||      `"`
   ||======||
   ||      ||

______________________________________________________________________
______________________________________________________________________

  Title:                  MUSNTLIVE LAME ASCII ART ADVISORY
  Severity:               High/420
  Advisory ID:            MSNLVADV-2010-001
  Found Date:             01.04.1998
  Date Reported:          01.04.1998
  Release Date:           20.01.2011
  Author:                 MUSNTLIVE
  Affected Component:     IS WANNA BE FUTURE CISSPs

  Remote Exploitable:     Yes
  Local Exploitable:      Yes
  Patch Status:           ELECTRO CONVULSIVE SHOCK THERAPY IS NOW ILLEGAL
  Discovered by:          MUSNTLIVE
  Thanks to:              pizdascriptkiddys



Background:
===========

ASCII art is was stupid show of stupid talent. Is now must in use by
lame scriptkiddys who is must want to scare industry into is think
that advisor is super security Yakov Smirnov. You is not funny!!


Proof is Concept
================


  ''      ''
  ||      ||  (''''    ('''' .|'',  '''|.  '||''| '||  ||`
  ||      ||   `'')     `'') ||    .|''||   ||     `|..||
 .||.    .||. `...'    `...' `|..' `|..||. .||.        ||
                                                    ,  |'
                                                     ''

 '||                   '||
  ||                    ||
  ||''|,  '''|.  .|'',  || //`  .|''|, '||''|
  ||  || .|''||  ||     ||<<    ||..||  ||
 .||  || `|..||. `|..' .|| \\.  `|...  .||.



               '||`
                ||
 '||''| .|''|,  ||  .|''|,  '''|.  ('''' .|''|,
  ||    ||..||  ||  ||..|| .|''||   `'') ||..||
 .||.   `|...  .||. `|...  `|..||. `...' `|...



             ||`
             ||          ''
  '''|.  .|''||  \\  //  ||  ('''' .|''|, '||''| '||  ||`
 .|''||  ||  ||   \\//   ||   `'') ||  ||  ||     `|..||
 `|..||. `|..||.   \/   .||. `...' `|..|' .||.        ||
                                                   ,  |'
                                                    ''

                       || ||
                       || ||
 '||  ||` .|''|, ('''' || ||
  `|..||  ||..||  `'')
      ||  `|...  `...' || ||
   ,  |'
    ''



Solution:
=========

USA is style Waterboard torture is user of ASCII

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/