[Full-disclosure] MSNLVADV-2010-001 Security Advisory

Григорий Братислава musntlive at gmail.com
Fri Jan 21 18:00:20 GMT 2011


______________________________________________________________________
------------------------- MSNLVADV-2010-001 --------------------------

                 MusntLive Lame ASCII ART ADVISORY
______________________________________________________________________
______________________________________________________________________


   || __   ||
   ||=\_`\=||
   || (__/ ||
   ||  | | :-"""-.
   ||==| \/-=-.   \
   ||  |(_|o o/   |_
   ||   \/ "  \   ,_)
   ||====\ U  /__/
   ||     ;--'  `-.
   ||    /      .  \
   ||===;        \  \
   ||   |         | |
  _______\"""'   _/_/
 (~|_______ |  (_  \
   /  .' ( | )   \\_/
  |_ /     |||  |\\
 /  _)=====|||  | ||
/  /|      ||/  / //
\_/||      ( `-/ ||
   ||======/  /  \\ .-.
   ||      \_/    \'-'/
   ||      ||      `"`
   ||======||
   ||      ||

______________________________________________________________________
______________________________________________________________________

  Title:                  MUSNTLIVE LAME ASCII ART ADVISORY
  Severity:               High/420
  Advisory ID:            MSNLVADV-2010-001
  Found Date:             01.04.1998
  Date Reported:          01.04.1998
  Release Date:           20.01.2011
  Author:                 MUSNTLIVE
  Affected Component:     IS WANNA BE FUTURE CISSPs

  Remote Exploitable:     Yes
  Local Exploitable:      Yes
  Patch Status:           ELECTRO CONVULSIVE SHOCK THERAPY IS NOW ILLEGAL
  Discovered by:          MUSNTLIVE
  Thanks to:              pizdascriptkiddys



Background:
===========

ASCII art is was stupid show of stupid talent. Is now must in use by
lame scriptkiddys who is must want to scare industry into is think
that advisor is super security Yakov Smirnov. You is not funny!!


Proof is Concept
================


  ''      ''
  ||      ||  (''''    ('''' .|'',  '''|.  '||''| '||  ||`
  ||      ||   `'')     `'') ||    .|''||   ||     `|..||
 .||.    .||. `...'    `...' `|..' `|..||. .||.        ||
                                                    ,  |'
                                                     ''

 '||                   '||
  ||                    ||
  ||''|,  '''|.  .|'',  || //`  .|''|, '||''|
  ||  || .|''||  ||     ||<<    ||..||  ||
 .||  || `|..||. `|..' .|| \\.  `|...  .||.



               '||`
                ||
 '||''| .|''|,  ||  .|''|,  '''|.  ('''' .|''|,
  ||    ||..||  ||  ||..|| .|''||   `'') ||..||
 .||.   `|...  .||. `|...  `|..||. `...' `|...



             ||`
             ||          ''
  '''|.  .|''||  \\  //  ||  ('''' .|''|, '||''| '||  ||`
 .|''||  ||  ||   \\//   ||   `'') ||  ||  ||     `|..||
 `|..||. `|..||.   \/   .||. `...' `|..|' .||.        ||
                                                   ,  |'
                                                    ''

                       || ||
                       || ||
 '||  ||` .|''|, ('''' || ||
  `|..||  ||..||  `'')
      ||  `|...  `...' || ||
   ,  |'
    ''



Solution:
=========

USA is style Waterboard torture is user of ASCII



Full-Disclosure is hosted and sponsored by Secunia.