full-disclosure - Fernando Gont remote command execution and big mouth vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <42F1FEA6.9070708@rs-labs.com>
Date: Thu Aug  4 12:41:20 2005
From: roman at rs-labs.com (Roman Medina-Heigl Hernandez)
Subject: Fernando Gont remote command execution	and
	big mouth vulnerability

Hi,

Fernando Gont wrote:
> At 09:04 a.m. 03/08/2005, Joxean Koret wrote:
> 
>> SHUT THE FUCK UP!!! AND FIX YOUR FUCKING WEBSITE!!!  WE ARE ALL SICK
>> OF YOUR BORING E-MAILS!!!! MOTHERFUCKER!
>>
>> http://thor.prohosting.com/fgont/cgi-bin/whois.pl

Well, not precisely an example of politeness but it seems true... Have a
look to the signature:
"Gont's web site
Contact Fernando Gont at fernando@...t.com.ar"

> FYI, my website is http://www.gont.com.ar .
> My site does not contan scripts, and is hosted on an OpenBSD server.

Umm, let's see this:
http://64.233.167.104/search?q=cache:KplpfqgJV_MJ:gont.com.ar/tools/+dig+site:gont.com.ar&hl=es&client=firefox-a

And that:
http://gont.com.ar/tools/

Mysteriously your site was silenty updated hours ago and dig tool removed...

PS: Only my thoughts, no offense meant.

Cheers,
-Rom?n