Re: [SECURITY][GNAA 1488-1] slimhttpd security-update

[Leon Kaiser <literalka () gmail com>]

Has this been fixed yet?
-- 
========================================================
Leon Kaiser      - Head of GNAA Public Relations -
        literalka () gnaa eu || literalka () goatse fr
       http://gnaa.eu || http://security.goatse.fr
      7BEECD8D FCBED526 F7960173 459111CE F01F9923
"The mask of anonymity is not intensely constructive."
       -- Andrew "weev" Auernheimer
======================================================== 

On Wed, 2011-10-19 at 16:47 -0700, N Za wrote:

> -----BEGIN HASH SIGNED MESSAGE-----
> Hash: Bubble
>
> - -------------------------------------------------------------------------
> GNAA Security Advisory GNAA-1488-1                   security () gnaa eu
> http://security.on.nimp.org/                           N Za
> October 19, 2011                        http://security.on.nimp.org/faq/
> - -------------------------------------------------------------------------
>
> Package        : slimhttpd
> Vulnerability  : several
> Problem type   : local
> GNOS-specific bug: no
> GNOS Bug       :  101
>
> In the package `` slimhttpd'' found at https://github.com/ajwak95/SlimHTTPD there exist several vulnerabilities. 
>
> After cc httpd.c -o httpd I run slimhttpd with index.html with lines longer than 256 characters and receive:
> [1]    1386 segmentation fault (core dumped)  ./http
>
> Also after I run slimhttpd and kill -9 it I am unable to restart server for several minutes due to lack of set 
> SO_REUSEADDR on socket.
>
> I tried to contact the vendor Alex Conroy, ajwak95, but he is too scared to use freenode irc.
>
>  About SlimHTTPD: 
>
> ripe with gaping vulnerabilities
>
>  About ajwak95:
>
> underage
>
>  About GNAA:
> GNAA (GAY NIGGER ASSOCIATION OF AMERICA) is the first organization which gathers GAY NIGGERS from all over America 
> and abroad for one common goal - being GAY NIGGERS.
>
> Are you GAY?
> Are you a NIGGER?
> Are you a GAY NIGGER?
>
> If you answered "Yes" to all of the above questions, then GNAA (GAY NIGGER ASSOCIATION OF AMERICA) might be exactly 
> what you've been looking for!
> Join GNAA (GAY NIGGER ASSOCIATION OF AMERICA) today, and enjoy all the benefits of being a full-time GNAA member.
> GNAA (GAY NIGGER ASSOCIATION OF AMERICA) is the fastest-growing GAY NIGGER community with THOUSANDS of members all 
> over United States of America and the World! You, too, can be a part of GNAA if you join today!
>
> Why not? It's quick and easy - only 3 simple steps!
> First, you have to obtain a copy of GAYNIGGERS FROM OUTER SPACE THE MOVIE and watch it. You can download the movie 
> (~130mb) using BitTorrent.
> Second, you need to succeed in posting a GNAA First Post on slashdot.org, a popular "news for trolls" website.
> Third, you need to join the official GNAA irc channel #GNAA on irc.gnaa.eu, and apply for membership.
> Talk to one of the ops or any of the other members in the channel to sign up today! Upon submitting your application, 
> you will be required to submit links to your successful First Post, and you will be tested on your knowledge of 
> GAYNIGGERS FROM OUTER SPACE.
>
> If you are having trouble locating #GNAA, the official GAY NIGGER ASSOCIATION OF AMERICA irc channel, you might be on 
> a wrong irc network. The correct network is NiggerNET, and you can connect to irc.gnaa.eu as our official server. 
> Follow this link if you are using an irc client such as mIRC. 
>
> If you have mod points and would like to support GNAA, please moderate this post up.
>
> .________________________________________________.
> | ______________________________________._a,____    | Press contact:
> | _______a_._______a_______aj#0s_____aWY!400.___    | Gary Niger
> | __ad#7!!*P____a.d#0a____#!-_#0i___.#!__W#0#___        | gary_niger () gnaa eu
> | _j#'_.00#,___4#dP_"#,__j#,__0#Wi___*00P!_"#L,_                 | GNAA Corporate Headquarters
> | _"#ga#9!01___"#01__40,_"4Lj#!_4#g_________"01_               | 143 Rolloffle Avenue
> | ________"#,___*@`__-N#____`___-!^_____________             | Tarzana, California 91356
> | _________#1__________?________________________         |
> | _________j1___________________________________          | All other inquiries:
> | ____a,___jk_GAY_NIGGER_ASSOCIATION_OF_AMERICA_ | Enid Al-Punjabi
> | ____!4yaa#l___________________________________   | enid_al_punjabi () gnaa eu
> | ______-"!^____________________________________ | GNAA World Headquarters
> ` _______________________________________________' 160-0023 Japan Tokyo-to Shinjuku-ku Nishi-Shinjuku 3-20-2
>
> Copyright (c) 2003-2011 Gay Nigger Association of America
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/