24 · 10

Gnump3d: New release is imminent.

Steve Kemp, gnump3d founder and current maintainer is going to release a new version of gnump3d. This release will introduce some changes:
  • Password authentication is completely going away, due to some problems, especially discovery of a new hole which can be verified with netcat:
GET / HTTP/1.0
-> All looks good. You'll get a 403 header back.
Now try this malformed request instead:
GET /
-> Password auth bypassed :(
This hole can be explained by the home-made web server implemented.
  • "Split warning" will be removed when gnump3d is starting (index updating).
  • Some other bugs reported by mail will be fixed.
    Media_httpfeedsfeedbu_bhtnf