OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: X-Force (xforce_at_iss.net)
Date: Mon Jul 22 2002 - 13:12:50 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to
    majordomoiss.net Contact alert-owneriss.net for help with any problems!
    ---------------------------------------------------------------------------

    -----BEGIN PGP SIGNED MESSAGE-----

    Internet Security Systems Security Alert Summary AS02-29
    July 22, 2002

    X-Force Vulnerability and Threat Database:
    http://www.iss.net/security_center

    To receive these Alert Summaries, as well as other Alerts and
    Advisories, subscribe to the Internet Security Systems Alert
    mailing list at:
    http://www.iss.net/security_center/maillists

    This summary is available at the following address:
    http://www.iss.net/security_center/alerts/AS02-29.php

    _____
    Contents:
    * 56 Reported Vulnerabilities
    * Risk Factor Key
    _____

    Date Reported: 07/10/2002
    Brief Description: Sun Solaris pkgadd command could install files with
                        insecure permissions
    Risk Factor: Medium
    Attack Type: Host Based
    Platforms: Solaris 2.5.1, Solaris 2.6, Solaris 7, Solaris 8
    Vulnerability: solaris-pkgadd-insecure-permissions
    X-Force URL: http://www.iss.net/security_center/static/9544.php

    Date Reported: 07/10/2002
    Brief Description: Sun Solaris Volume Manager (vold) buffer overflow
    Risk Factor: High
    Attack Type: Host Based
    Platforms: Solaris 2.5.1, Solaris 2.6, Solaris 7, Solaris 8
    Vulnerability: solaris-vold-bo
    X-Force URL: http://www.iss.net/security_center/static/9545.php

    Date Reported: 07/10/2002
    Brief Description: Entercept Agent account password exposure
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: Entercept Agent pre20020521, Windows 2000, Windows
                        NT, Windows XP
    Vulnerability: entercept-agent-password-exposure
    X-Force URL: http://www.iss.net/security_center/static/9546.php

    Date Reported: 07/11/2002
    Brief Description: Popcorn mail client denial of service
    Risk Factor: Low
    Attack Type: Network Based
    Platforms: Popcorn 1.20 and earlier, Windows All versions
    Vulnerability: popcorn-mail-dos
    X-Force URL: http://www.iss.net/security_center/static/9547.php

    Date Reported: 07/11/2002
    Brief Description: Lil' HTTP Server pbcgi.cgi cross-site scripting
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: Lil' HTTP Server 2.1, Lil' HTTP Server 2.2, Windows
                        All versions
    Vulnerability: lilhttp-pbcgi-xss
    X-Force URL: http://www.iss.net/security_center/static/9548.php

    Date Reported: 07/11/2002
    Brief Description: Sun i-Runbook Web interface none.php could be used
                        to view sensitive information
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: Solaris All versions, Sun i-Runbook 2.5.2
    Vulnerability: sun-irunbook-information-disclosure
    X-Force URL: http://www.iss.net/security_center/static/9549.php

    Date Reported: 07/12/2002
    Brief Description: Xeneo Web Server (WebMan) "dot dot" directory
                        traversal
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: Windows 2000, Windows NT, Windows XP, Xeneo Web
                        Server 0.9
    Vulnerability: xeneo-dotdot-directory-traversal
    X-Force URL: http://www.iss.net/security_center/static/9550.php

    Date Reported: 07/12/2002
    Brief Description: ATPhttpd has multiple remote buffer overflows
    Risk Factor: High
    Attack Type: Network Based
    Platforms: ATPhttpd 0.4b, FreeBSD 3.2-RELEASE, FreeBSD 4.0,
                        NetBSD 1.4.1
    Vulnerability: atphttpd-multiple-bo
    X-Force URL: http://www.iss.net/security_center/static/9551.php

    Date Reported: 07/12/2002
    Brief Description: CARE 2002 user-supplied include statements could be
                        used to read files
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: CARE 2002 1.0.01 and earlier, Linux All versions,
                        Unix All versions, Windows All versions
    Vulnerability: care2002-include-read-files
    X-Force URL: http://www.iss.net/security_center/static/9552.php

    Date Reported: 07/12/2002
    Brief Description: CARE 2002 SQL injection
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: CARE 2002 1.0.01 and earlier, Linux All versions,
                        Unix All versions, Windows All versions
    Vulnerability: care2002-sql-injection
    X-Force URL: http://www.iss.net/security_center/static/9553.php

    Date Reported: 07/13/2002
    Brief Description: Hosting Controller allows an attacker to modify
                        passwords
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: Hosting Controller 1.4, Hosting Controller 2002,
                        Windows 2000, Windows NT
    Vulnerability: hosting-controller-password-modification
    X-Force URL: http://www.iss.net/security_center/static/9554.php

    Date Reported: 07/15/2002
    Brief Description: IBM Tivoli Management Framework TMR Endpoint buffer
                        overflow
    Risk Factor: High
    Attack Type: Network Based
    Platforms: AIX All versions, HP-UX All versions, IBM Tivoli
                        Management Framework 3.6.x through 3.7.1, Solaris
                        All versions, Windows 2000, Windows NT
    Vulnerability: tivoli-tmr-endpoint-bo
    X-Force URL: http://www.iss.net/security_center/static/9555.php

    Date Reported: 07/15/2002
    Brief Description: IBM Tivoli Management Framework TMR ManagedNode
                        buffer overflow
    Risk Factor: High
    Attack Type: Network Based
    Platforms: AIX All versions, HP-UX All versions, IBM Tivoli
                        Management Framework 3.6.x through 3.7.1, Solaris
                        All versions, Windows 2000, Windows NT
    Vulnerability: tivoli-tmr-managednode-bo
    X-Force URL: http://www.iss.net/security_center/static/9556.php

    Date Reported: 07/13/2002
    Brief Description: BadBlue malformed NULL byte could disclose
                        file contents
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: BadBlue Personal Edition 1.7.3, Windows All
                        versions
    Vulnerability: badblue-null-file-disclosure
    X-Force URL: http://www.iss.net/security_center/static/9557.php

    Date Reported: 07/13/2002
    Brief Description: BadBlue ext.ini plaintext passwords
    Risk Factor: Medium
    Attack Type: Host Based / Network Based
    Platforms: BadBlue Personal Edition 1.7.3, Windows All
                        versions
    Vulnerability: badblue-plaintext-passwords
    X-Force URL: http://www.iss.net/security_center/static/9558.php

    Date Reported: 07/15/2002
    Brief Description: Novell NetMail IMAP denial of service
    Risk Factor: Low
    Attack Type: Network Based
    Platforms: Novell NetMail 3.0.3, Novell NetMail 3.1, Novell
                        NetMail XE 3.1, Novell NetWare 6, Red Hat Linux
                        7.3, Solaris All versions, Windows All versions
    Vulnerability: netmail-imap-dos
    X-Force URL: http://www.iss.net/security_center/static/9559.php

    Date Reported: 07/15/2002
    Brief Description: Novell NetMail Web interface ModWeb and WebAdmin
                        buffer overflow
    Risk Factor: High
    Attack Type: Network Based
    Platforms: Novell NetMail 3.0.3, Novell NetMail 3.1, Novell
                        NetMail XE 3.1, Novell NetWare 6, Red Hat Linux
                        7.3, Solaris All versions, Windows All versions
    Vulnerability: netmail-web-interface-bo
    X-Force URL: http://www.iss.net/security_center/static/9560.php

    Date Reported: 07/12/2002
    Brief Description: Pingtel xpressa has a default null administrator's
                        password
    Risk Factor: High
    Attack Type: Host Based / Network Based
    Platforms: Pingtel xpressa PX-1 1.2.5 to 1.2.7.4
    Vulnerability: pingtel-xpressa-default-password
    X-Force URL: http://www.iss.net/security_center/static/9562.php

    Date Reported: 07/12/2002
    Brief Description: Pingtel xpressa call forwarding could allow an
                        attacker to hijack calls
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: Pingtel xpressa PX-1 1.2.5 to 1.2.7.4
    Vulnerability: pingtel-xpressa-call-hijacking
    X-Force URL: http://www.iss.net/security_center/static/9563.php

    Date Reported: 07/12/2002
    Brief Description: Pingtel xpressa Web interface can be used to cause
                        a denial of service
    Risk Factor: Low
    Attack Type: Network Based
    Platforms: Pingtel xpressa PX-1 1.2.5 to 1.2.7.4
    Vulnerability: pingtel-xpressa-web-dos
    X-Force URL: http://www.iss.net/security_center/static/9564.php

    Date Reported: 07/12/2002
    Brief Description: Pingtel xpressa basic HTTP authentication transmits
                        Base64 encoded plaintext usernames and passwords
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: Pingtel xpressa PX-1 1.2.5 to 1.2.7.4
    Vulnerability: pingtel-xpressa-plaintext-passwords
    X-Force URL: http://www.iss.net/security_center/static/9565.php

    Date Reported: 07/12/2002
    Brief Description: Pingtel xpressa DNS spoofing could cause a user to
                        download malicious applications
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: Pingtel xpressa PX-1 1.2.5 to 1.2.7.4
    Vulnerability: pingtel-xpressa-dns-spoofing
    X-Force URL: http://www.iss.net/security_center/static/9566.php

    Date Reported: 07/12/2002
    Brief Description: Pingtel xpressa could allow an attacker to reset
                        the phone to the factory default settings
    Risk Factor: High
    Attack Type: Network Based
    Platforms: Pingtel xpressa PX-1 1.2.5 to 1.2.7.4
    Vulnerability: pingtel-xpressa-factory-defaults
    X-Force URL: http://www.iss.net/security_center/static/9567.php

    Date Reported: 07/12/2002
    Brief Description: Pingtel xpressa could allow an attacker to log out
                        the current user and re-register the phone
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: Pingtel xpressa PX-1 1.2.5 to 1.2.7.4
    Vulnerability: pingtel-xpressa-phone-reregister
    X-Force URL: http://www.iss.net/security_center/static/9568.php

    Date Reported: 07/12/2002
    Brief Description: Pingtel xpressa administrative sessions fail to
                        timeout
    Risk Factor: High
    Attack Type: Host Based
    Platforms: Pingtel xpressa PX-1 1.2.5 to 1.2.7.4
    Vulnerability: pingtel-xpressa-admin-timeout
    X-Force URL: http://www.iss.net/security_center/static/9569.php

    Date Reported: 07/12/2002
    Brief Description: Pingtel xpressa allows unauthorized firmware
                        upgrades
    Risk Factor: Medium
    Attack Type: Host Based
    Platforms: Pingtel xpressa PX-1 1.2.5 to 1.2.7.4
    Vulnerability: pingtel-xpressa-firmware-upgrade
    X-Force URL: http://www.iss.net/security_center/static/9570.php

    Date Reported: 07/14/2002
    Brief Description: Pingtel xpressa telnet server could allow
                        administrative access to the VxWorks operating
                        system
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: Pingtel xpressa PX-1 1.2.5 to 1.2.7.4
    Vulnerability: pingtel-xpressa-telnet-access
    X-Force URL: http://www.iss.net/security_center/static/9572.php

    Date Reported: 07/15/2002
    Brief Description: Caldera OpenServer UUCP uux buffer overflow
    Risk Factor: High
    Attack Type: Host Based
    Platforms: Caldera OpenServer 5.0.5, Caldera OpenServer 5.0.6
    Vulnerability: openserver-uucp-uux-bo
    X-Force URL: http://www.iss.net/security_center/static/9575.php

    Date Reported: 07/15/2002
    Brief Description: Norton Personal Firewall and Norton Internet
                        Security HTTP proxy buffer overflow
    Risk Factor: High
    Attack Type: Host Based / Network Based
    Platforms: Norton Internet Security 2001, Norton Personal
                        Firewall 2001 3.0.4.91, Windows 2000, Windows NT
    Vulnerability: norton-fw-http-bo
    X-Force URL: http://www.iss.net/security_center/static/9579.php

    Date Reported: 07/12/2002
    Brief Description: Microsoft IIS SMTP service encapsulated addresses
                        could allow mail relaying
    Risk Factor: Low
    Attack Type: Network Based
    Platforms: Microsoft IIS 4.0, Microsoft IIS 5.0, Windows 2000,
                        Windows NT
    Vulnerability: iis-smtp-mail-relay
    X-Force URL: http://www.iss.net/security_center/static/9580.php

    Date Reported: 07/15/2002
    Brief Description: 123tkShop user-supplied include statements could be
                        used to read files
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: 123tkShop 0.3 and earlier, Linux All versions, Unix
                        All versions, Windows All versions
    Vulnerability: 123tkshop-include-read-files
    X-Force URL: http://www.iss.net/security_center/static/9581.php

    Date Reported: 07/15/2002
    Brief Description: 123tkShop SQL injection
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: 123tkShop 0.3 and earlier, Linux All versions, Unix
                        All versions, Windows All versions
    Vulnerability: 123tkshop-sql-injection
    X-Force URL: http://www.iss.net/security_center/static/9582.php

    Date Reported: 07/15/2002
    Brief Description: newsx NNTP client syslog() local format string
    Risk Factor: High
    Attack Type: Host Based
    Platforms: FreeBSD 4.6-STABLE, newsx 1.4pl6 and earlier, Unix
                        All versions
    Vulnerability: newsx-syslog-format-string
    X-Force URL: http://www.iss.net/security_center/static/9583.php

    Date Reported: 07/16/2002
    Brief Description: Oddsock Song Requester long CGI parameter could
                        crash Winamp
    Risk Factor: Low
    Attack Type: Network Based
    Platforms: Oddsock Song Requester 2.1, Windows All versions
    Vulnerability: oddsock-song-requester-dos
    X-Force URL: http://www.iss.net/security_center/static/9585.php

    Date Reported: 07/17/2002
    Brief Description: Jigsaw /aux request could disclose path to Web root
                        directory
    Risk Factor: Low
    Attack Type: Network Based
    Platforms: Jigsaw 2.2.1, Windows 2000
    Vulnerability: jigsaw-aux-path-disclosure
    X-Force URL: http://www.iss.net/security_center/static/9586.php

    Date Reported: 07/17/2002
    Brief Description: Jigsaw DOS device request denial of service
    Risk Factor: Low
    Attack Type: Network Based
    Platforms: Jigsaw 2.2.1, Windows 2000
    Vulnerability: jigsaw-dos-device-dos
    X-Force URL: http://www.iss.net/security_center/static/9587.php

    Date Reported: 07/17/2002
    Brief Description: Macromedia Sitespring 500error.jsp cross-site
                        scripting
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: Macromedia Sitespring 1.2, Windows 2000
    Vulnerability: sitespring-500error-xss
    X-Force URL: http://www.iss.net/security_center/static/9588.php

    Date Reported: 07/17/2002
    Brief Description: Resin DOS device request could disclose path to Web
                        root directory
    Risk Factor: Low
    Attack Type: Network Based
    Platforms: Resin 2.1.1, Resin 2.1.2, Windows 2000
    Vulnerability: resin-dos-path-disclosure
    X-Force URL: http://www.iss.net/security_center/static/9590.php

    Date Reported: 07/15/2002
    Brief Description: ICQ .scm file modify sound settings
    Risk Factor: Low
    Attack Type: Network Based
    Platforms: ICQ 2000a Build 3722, ICQ 2000a Build 3727, Windows
                        All versions
    Vulnerability: icq-scm-sound-modify
    X-Force URL: http://www.iss.net/security_center/static/9606.php

    Date Reported: 07/16/2002
    Brief Description: HP Tru64 UNIX /usr/bin/ipcs buffer overflow
    Risk Factor: High
    Attack Type: Host Based
    Platforms: Tru64 UNIX 4.0f, Tru64 UNIX 4.0g, Tru64 UNIX 5.0a,
                        Tru64 UNIX 5.1, Tru64 UNIX 5.1a
    Vulnerability: tru64-ipcs-bo
    X-Force URL: http://www.iss.net/security_center/static/9613.php

    Date Reported: 07/16/2002
    Brief Description: HP Tru64 UNIX inetd remote denial of service
    Risk Factor: Low
    Attack Type: Network Based
    Platforms: Tru64 UNIX 4.0f, Tru64 UNIX 4.0g, Tru64 UNIX 5.0a,
                        Tru64 UNIX 5.1, Tru64 UNIX 5.1a
    Vulnerability: tru64-inetd-remote-dos
    X-Force URL: http://www.iss.net/security_center/static/9614.php

    Date Reported: 07/15/2002
    Brief Description: IMHO Webmail module for Roxen WebServer could allow
                        mail session hijacking
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: IMHO 0.98.3 and earlier, Roxen Webserver 2.2, Unix
                        All versions, Windows All versions
    Vulnerability: imho-roxen-session-hijacking
    X-Force URL: http://www.iss.net/security_center/static/9615.php

    Date Reported: 07/16/2002
    Brief Description: AOL Instant Messenger HTTP-EQUIV="refresh" could be
                        used to perform functions
    Risk Factor: Low
    Attack Type: Network Based
    Platforms: AOL Instant Messenger 4.5, AOL Instant Messenger
                        4.7, MacOS X All versions, Windows 2000, Windows
                        95, Windows 98, Windows ME, Windows XP
    Vulnerability: aim-http-refresh-functions
    X-Force URL: http://www.iss.net/security_center/static/9616.php

    Date Reported: 07/12/2002
    Brief Description: Internet Explorer JavaScript page transitions
                        denial of service
    Risk Factor: Low
    Attack Type: Network Based
    Platforms: Microsoft Internet Explorer 6.0, Windows All
                        versions
    Vulnerability: ie-page-transition-dos
    X-Force URL: http://www.iss.net/security_center/static/9617.php

    Date Reported: 07/18/2002
    Brief Description: MERCUR Mailserver Control-Service login buffer
                        overflow
    Risk Factor: High
    Attack Type: Network Based
    Platforms: MERCUR Mailserver 4.2, Windows All versions
    Vulnerability: mercur-control-service-bo
    X-Force URL: http://www.iss.net/security_center/static/9618.php

    Date Reported: 07/18/2002
    Brief Description: WWWOFFLE negative "Content-Length" value buffer
                        overflow
    Risk Factor: Low
    Attack Type: Network Based
    Platforms: Linux All versions, Unix All versions, WWWOFFLE
                        2.7b and earlier
    Vulnerability: wwwoffle-neg-length-bo
    X-Force URL: http://www.iss.net/security_center/static/9619.php

    Date Reported: 07/18/2002
    Brief Description: HP-UX ISEE could allow unauthorized file access
    Risk Factor: Medium
    Attack Type: Host Based
    Platforms: HP-UX 11.00, HP-UX 11.11
    Vulnerability: hp-isee-unauth-access
    X-Force URL: http://www.iss.net/security_center/static/9620.php

    Date Reported: 07/17/2002
    Brief Description: Python SmartCookie class Pickle module could allow
                        arbitrary code execution
    Risk Factor: High
    Attack Type: Host Based
    Platforms: Amiga UNIX All versions, Macintosh All versions,
                        OS/2 All versions, Python 1.5.2, Unix All versions,
                        Windows All versions
    Vulnerability: python-smartcookie-pickle-code
    X-Force URL: http://www.iss.net/security_center/static/9622.php

    Date Reported: 07/11/2002
    Brief Description: Apache HTTP Server ap_log_rerror() path disclosure
    Risk Factor: Low
    Attack Type: Network Based
    Platforms: Apache HTTP Server 2.0 to 2.0.35, Linux All
                        versions, Windows All versions
    Vulnerability: apache-aplogrerror-path-disclosure
    X-Force URL: http://www.iss.net/security_center/static/9623.php

    Date Reported: 07/17/2002
    Brief Description: Fastlink TheServer stores passwords in plain text
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: TheServer 1.75, Windows All versions
    Vulnerability: fastlink-theserver-plaintext-passwords
    X-Force URL: http://www.iss.net/security_center/static/9624.php

    Date Reported: 07/17/2002
    Brief Description: Python Pickle class constructor could allow
                        arbitrary code execution
    Risk Factor: High
    Attack Type: Host Based
    Platforms: Amiga UNIX All versions, Macintosh All versions,
                        OS/2 All versions, Python 1.5.2 through 2.1.3, Unix
                        All versions, Windows All versions
    Vulnerability: python-classconstructor-pickle-code
    X-Force URL: http://www.iss.net/security_center/static/9626.php

    Date Reported: 07/17/2002
    Brief Description: PhpWiki cross-site scripting
    Risk Factor: Medium
    Attack Type: Network Based
    Platforms: Linux All versions, PhpWiki 1.3.3 and earlier, Unix
                        All versions, Windows All versions
    Vulnerability: phpwiki-xss
    X-Force URL: http://www.iss.net/security_center/static/9627.php

    Date Reported: 07/17/2002
    Brief Description: Oracle Reports Server could disclose sensitive
                        information
    Risk Factor: Low
    Attack Type: Network Based
    Platforms: Linux All versions, Oracle Reports6i 6.0.8.x,
                        Oracle9i Application Server Reports 9.0.2.x, Unix
                        All versions, Windows All versions
    Vulnerability: oracle-reports-information-disclosure
    X-Force URL: http://www.iss.net/security_center/static/9628.php

    Date Reported: 07/17/2002
    Brief Description: ICQ .scm skin file could allow remote code
                        execution
    Risk Factor: High
    Attack Type: Network Based
    Platforms: ICQ 2000a Build 3722, ICQ 2000a Build 3727, Windows
                        All versions
    Vulnerability: icq-scm-code-execution
    X-Force URL: http://www.iss.net/security_center/static/9629.php

    Date Reported: 07/17/2002
    Brief Description: Winamp wsz skin file could allow remote code
                        execution
    Risk Factor: High
    Attack Type: Network Based
    Platforms: Winamp 2.80 and earlier, Windows All versions
    Vulnerability: winamp-wsz-code-execution
    X-Force URL: http://www.iss.net/security_center/static/9630.php

    Date Reported: 07/17/2002
    Brief Description: Java Web Start .jnlp file could allow remote code
                        execution
    Risk Factor: High
    Attack Type: Network Based
    Platforms: Java Web Start 1.0, Java Web Start 1.0.1, Java Web
                        Start 1.0.1 _02, Java Web Start 1.0.1_01, Unix All
                        versions, Windows All versions
    Vulnerability: webstart-jnlp-code-execution
    X-Force URL: http://www.iss.net/security_center/static/9631.php

    _____

    Risk Factor Key:

         High Any vulnerability that provides an attacker with immediate
                  access into a machine, gains superuser access, or bypasses
                  a firewall. Example: A vulnerable Sendmail 8.6.5 version
                  that allows an intruder to execute commands on mail server.
         Medium Any vulnerability that provides information that has a high
                  potential of giving system access to an intruder. Example:
                  A misconfigured TFTP or vulnerable NIS server that allows
                  an intruder to get the password file that could contain an
                  account with a guessable password.
         Low Any vulnerability that provides information that could
                  potentially lead to a compromise. Example: A finger that
                  allows an intruder to find out who is online and potential
                  accounts to attempt to crack passwords via brute force
                  methods.

    ______

    About Internet Security Systems (ISS)
    Founded in 1994, Internet Security Systems (ISS) (Nasdaq: ISSX) is a
    pioneer and world leader in software and services that protect critical
    online resources from an ever-changing spectrum of threats and misuse.
    Internet Security Systems is headquartered in Atlanta, GA, with
    additional operations throughout the Americas, Asia, Australia, Europe
    and the Middle East.

    Copyright (c) 2002 Internet Security Systems, Inc. All rights reserved
    worldwide.

    Permission is hereby granted for the electronic redistribution of this
    document. It is not to be edited or altered in any way without the
    express written consent of the Internet Security Systems X-Force. If you
    wish to reprint the whole or any part of this document in any other
    medium excluding electronic media, please email xforceiss.net for
    permission.

    Disclaimer: The information within this paper may change without notice. Internet
    Security Systems provides this information on an AS IS basis with NO warranties,
    implied or otherwise. Any use of this information is at the user’s risk. In no event
    shall Internet Security Systems be held liable for any damages whatsoever arising
    out of or in connection with the use or dissemination of this information.

    X-Force PGP Key available on MIT's PGP key server and PGP.com's key server,
    as well as at http://www.iss.net/security_center/sensitive.php

    Please send suggestions, updates, and comments to: X-Force

    -----BEGIN PGP SIGNATURE-----
    Version: 2.6.2

    iQCVAwUBPTxKNDRfJiV99eG9AQH/lAP/a5nLBMDLaKvw/GX1BakBYg98nRhOEzu3
    3FQy1H7wogRo4mGW2uoIV5/3kj6DDDIaHTjCFURqVFnYNut61mSqnMhIdJibFfYU
    qsp+Aj0DQOwG55PS2xV65FqOhWB+Wor3pYPmtbTzkHDaGEHcjCcFf9/Cy3ALMUZ+
    asxOLDTX2vc=
    =kwZ6
    -----END PGP SIGNATURE-----