Re: [Full-disclosure] [SECURITY][GNAA 1488-1] slimhttpd security-update

[Laurelai <laurelai@xxxxxxxxxxxx>]

On 10/19/2011 06:47 PM, N Za wrote:
> -----BEGIN HASH SIGNED MESSAGE-----
> Hash: Bubble
>
> - -------------------------------------------------------------------------
> GNAA Security Advisory GNAA-1488-1                   security () gnaa eu
> http://security.on.nimp.org/                           N Za
> October 19, 2011                        http://security.on.nimp.org/faq/
> - -------------------------------------------------------------------------
>
> Package        : slimhttpd
> Vulnerability  : several
> Problem type   : local
> GNOS-specific bug: no
> GNOS Bug       :  101
>
> In the package `` slimhttpd'' found at https://github.com/ajwak95/SlimHTTPD 
> there exist several vulnerabilities. 
>
> After cc httpd.c -o httpd I run slimhttpd with index.html with lines longer 
> than 256 characters and receive:
> [1]    1386 segmentation fault (core dumped)  ./http
>
> Also after I run slimhttpd and kill -9 it I am unable to restart server for 
> several minutes due to lack of set SO_REUSEADDR on socket.
>
> I tried to contact the vendor Alex Conroy, ajwak95, but he is too scared to 
> use freenode irc.
>
>   About SlimHTTPD: 
>
> ripe with gaping vulnerabilities
>
>   About ajwak95:
>
> underage
>
>   About GNAA:
> GNAA (GAY NIGGER ASSOCIATION OF AMERICA) is the first organization which 
> gathers GAY NIGGERS from all over America and abroad for one common goal - 
> being GAY NIGGERS.
>
> Are you GAY?
> Are you a NIGGER?
> Are you a GAY NIGGER?
>
> If you answered "Yes" to all of the above questions, then GNAA (GAY NIGGER 
> ASSOCIATION OF AMERICA) might be exactly what you've been looking for!
> Join GNAA (GAY NIGGER ASSOCIATION OF AMERICA) today, and enjoy all the 
> benefits of being a full-time GNAA member.
> GNAA (GAY NIGGER ASSOCIATION OF AMERICA) is the fastest-growing GAY NIGGER 
> community with THOUSANDS of members all over United States of America and the 
> World! You, too, can be a part of GNAA if you join today!
>
> Why not? It's quick and easy - only 3 simple steps!
> First, you have to obtain a copy of GAYNIGGERS FROM OUTER SPACE THE MOVIE and 
> watch it. You can download the movie (~130mb) using BitTorrent.
> Second, you need to succeed in posting a GNAA First Post on slashdot.org, a 
> popular "news for trolls" website.
> Third, you need to join the official GNAA irc channel #GNAA on irc.gnaa.eu, 
> and apply for membership.
> Talk to one of the ops or any of the other members in the channel to sign up 
> today! Upon submitting your application, you will be required to submit links 
> to your successful First Post, and you will be tested on your knowledge of 
> GAYNIGGERS FROM OUTER SPACE.
>
> If you are having trouble locating #GNAA, the official GAY NIGGER ASSOCIATION 
> OF AMERICA irc channel, you might be on a wrong irc network. The correct 
> network is NiggerNET, and you can connect to irc.gnaa.eu as our official 
> server. Follow this link if you are using an irc client such as mIRC. 
>
> If you have mod points and would like to support GNAA, please moderate this 
> post up.
>
> .________________________________________________.
> | ______________________________________._a,____    | Press contact:
> | _______a_._______a_______aj#0s_____aWY!400.___    | Gary Niger
> | __ad#7!!*P____a.d#0a____#!-_#0i___.#!__W#0#___        | gary_niger@xxxxxxx
> | _j#'_.00#,___4#dP_"#,__j#,__0#Wi___*00P!_"#L,_                 | GNAA 
> Corporate Headquarters
> | _"#ga#9!01___"#01__40,_"4Lj#!_4#g_________"01_               | 143 
> Rolloffle Avenue
> | ________"#,___*@`__-N#____`___-!^_____________             | Tarzana, 
> California 91356
> | _________#1__________?________________________         |
> | _________j1___________________________________          | All other 
> inquiries:
> | ____a,___jk_GAY_NIGGER_ASSOCIATION_OF_AMERICA_ | Enid Al-Punjabi
> | ____!4yaa#l___________________________________   | enid_al_punjabi@xxxxxxx
> | ______-"!^____________________________________ | GNAA World Headquarters
> ` _______________________________________________' 160-0023 Japan Tokyo-to 
> Shinjuku-ku Nishi-Shinjuku 3-20-2
>
> Copyright (c) 2003-2011 Gay Nigger Association of America
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
Did any of the other channers on the list laugh uncontrollably at this?

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/