------------------------------------------------------------| capzlock |
---------------------------------------------| security advisory no. 1 |

-----------------------------------------------------------------------
CONFIDENTIAL INFORMATION - PLEASE DISTRIBUTE - CONFIDENTIAL INFORMATION
-----------------------------------------------------------------------

|---------------------------------------------------------------------|
|            "I am become Death, the destroyer of worlds."            |
|                                             - J. Robert Oppenheimer |
|---------------------------------------------------------------------|


#ifdef __ELITE_HACKER

[antiNSA@anti.security.is ~/.private]# ls -al

-rw-r-----    1 antiNSA    0day    21023911 May  9 01:22 why_capzlock_ownz_me.txt
-rw-r-----    1 antiNSA    0day      119511 May  2 22:09 12yroldboy.jpg
-rw-r-----    1 antiNSA    0day       16506 Apr  1 22:04 fatherandson.jpg
-rw-r-----    1 antiNSA    0day        4399 May  7 22:04 backdoor.com.passwordz.txt
-rw-r-----    1 antiNSA    0day        5619 Jan  4 22:09 codered.c

#endif /* __ELITE_HACKER */


This advisory is dedicated to the many hard-working penetrators
in the security industry. And, to the underground hackers that seek
fame and profit, their undying thirst for knowledge is a true
inspiration to us all.

This advisory is being leaked to the security mailing lists in
TESO fashion. Hi security freinds!

-----------------------------------------------------------------------

[PRODUCT]: BannerWheel v1.0
  
BannerWheel is a free script for displaying banner ads in a random
fashion. Users can set the probability of displaying each banner. This
script also keeps track of the number of times each banner is
displayed.

The script is intended for UNIX-based systems.

-----------------------------------------------------------------------

[PROBLEM]:

There are bufferoverflow vulneribilities in tha C source code of the
CGI package. Particularly, in badmin.c porshion.

[snip]-----------------------------------------------------------------

[capzlock@signal-11 ~/hack/the/planet]$ gcc badmin.c -o badmin.cgi -lcrypt
[capzlock@signal-11 ~/hack/the/planet]$ ./badmin
bwe(input): "command" ? kill.the.turkey
bwe(input): "rcmd" ? AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
bwe(input): "flag" ? kill.the.turkey
Segmentation fault
[capzlock@signal-11 ~/hack/the/planet]$

[snap]-----------------------------------------------------------------

This am very serious whole that could jeperdize the security of a
digital computer system.

-----------------------------------------------------------------------

TOODLES!@#$%!

capzlock
-------------------------
http://www.signal-11.com
capzlock@hushmail.com