/ The Unsorted BBS Collection / thegreatunsorted.tar / thegreatunsorted / hacking / unixhack / xhack

< prev

next >

MacOS 8.1

Win98

DOS

browse contents

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 46 72 6f 6d 20 63 65 72 | 74 2d 61 64 76 69 73 6f |From cer|t-adviso|
|00000010| 72 79 2d 72 65 71 75 65 | 73 74 40 63 65 72 74 2e |ry-reque|st@cert.|
|00000020| 6f 72 67 20 54 68 75 20 | 4e 6f 76 20 20 32 20 31 |org Thu |Nov  2 1|
|00000030| 36 3a 35 32 3a 30 32 20 | 31 39 39 35 0a 52 65 74 |6:52:02 |1995.Ret|
|00000040| 75 72 6e 2d 50 61 74 68 | 3a 20 63 65 72 74 2d 61 |urn-Path|: cert-a|
|00000050| 64 76 69 73 6f 72 79 2d | 72 65 71 75 65 73 74 40 |dvisory-|request@|
|00000060| 63 65 72 74 2e 6f 72 67 | 0a 52 65 63 65 69 76 65 |cert.org|.Receive|
|00000070| 64 3a 20 66 72 6f 6d 20 | 77 68 79 2e 63 65 72 74 |d: from |why.cert|
|00000080| 2e 6f 72 67 20 28 77 68 | 79 2e 63 65 72 74 2e 6f |.org (wh|y.cert.o|
|00000090| 72 67 20 5b 31 39 32 2e | 38 38 2e 32 30 39 2e 33 |rg [192.|88.209.3|
|000000a0| 31 5d 29 20 62 79 20 73 | 65 72 76 65 72 2e 73 6e |1]) by s|erver.sn|
|000000b0| 6e 69 2e 63 6f 6d 20 28 | 38 2e 36 2e 31 31 2f 38 |ni.com (|8.6.11/8|
|000000c0| 2e 36 2e 39 29 20 77 69 | 74 68 20 45 53 4d 54 50 |.6.9) wi|th ESMTP|
|000000d0| 20 69 64 20 51 41 41 31 | 37 34 33 35 3b 20 54 68 | id QAA1|7435; Th|
|000000e0| 75 2c 20 32 20 4e 6f 76 | 20 31 39 39 35 20 31 36 |u, 2 Nov| 1995 16|
|000000f0| 3a 35 32 3a 30 30 20 2d | 30 38 30 30 0a 52 65 63 |:52:00 -|0800.Rec|
|00000100| 65 69 76 65 64 3a 20 28 | 66 72 6f 6d 20 63 65 72 |eived: (|from cer|
|00000110| 74 2d 61 64 76 69 73 6f | 72 79 40 6c 6f 63 61 6c |t-adviso|ry@local|
|00000120| 68 6f 73 74 29 20 62 79 | 20 77 68 79 2e 63 65 72 |host) by| why.cer|
|00000130| 74 2e 6f 72 67 20 28 38 | 2e 36 2e 31 32 2f 43 45 |t.org (8|.6.12/CE|
|00000140| 52 54 2d 65 63 64 2e 31 | 29 20 69 64 20 53 41 41 |RT-ecd.1|) id SAA|
|00000150| 31 34 31 38 38 20 66 6f | 72 20 63 65 72 74 2d 61 |14188 fo|r cert-a|
|00000160| 64 76 69 73 6f 72 79 2d | 71 75 65 75 65 2d 32 32 |dvisory-|queue-22|
|00000170| 3b 20 54 68 75 2c 20 32 | 20 4e 6f 76 20 31 39 39 |; Thu, 2| Nov 199|
|00000180| 35 20 31 38 3a 34 39 3a | 31 39 20 2d 30 35 30 30 |5 18:49:|19 -0500|
|00000190| 0a 44 61 74 65 3a 20 54 | 68 75 2c 20 32 20 4e 6f |.Date: T|hu, 2 No|
|000001a0| 76 20 31 39 39 35 20 31 | 38 3a 34 39 3a 31 39 20 |v 1995 1|8:49:19 |
|000001b0| 2d 30 35 30 30 0a 4d 65 | 73 73 61 67 65 2d 49 64 |-0500.Me|ssage-Id|
|000001c0| 3a 20 3c 31 39 39 35 31 | 31 30 32 32 33 34 39 2e |: <19951|1022349.|
|000001d0| 53 41 41 31 34 31 38 38 | 40 77 68 79 2e 63 65 72 |SAA14188|@why.cer|
|000001e0| 74 2e 6f 72 67 3e 0a 46 | 72 6f 6d 3a 20 43 45 52 |t.org>.F|rom: CER|
|000001f0| 54 20 42 75 6c 6c 65 74 | 69 6e 20 3c 63 65 72 74 |T Bullet|in <cert|
|00000200| 2d 61 64 76 69 73 6f 72 | 79 40 63 65 72 74 2e 6f |-advisor|y@cert.o|
|00000210| 72 67 3e 0a 54 6f 3a 20 | 63 65 72 74 2d 61 64 76 |rg>.To: |cert-adv|
|00000220| 69 73 6f 72 79 40 63 65 | 72 74 2e 6f 72 67 0a 53 |isory@ce|rt.org.S|
|00000230| 75 62 6a 65 63 74 3a 20 | 43 45 52 54 20 56 65 6e |ubject: |CERT Ven|
|00000240| 64 6f 72 2d 49 6e 69 74 | 69 61 74 65 64 20 42 75 |dor-Init|iated Bu|
|00000250| 6c 6c 65 74 69 6e 20 56 | 42 2d 39 35 3a 30 38 20 |lletin V|B-95:08 |
|00000260| 2d 20 58 20 41 75 74 68 | 65 6e 74 69 63 61 74 69 |- X Auth|enticati|
|00000270| 6f 6e 20 56 75 6c 0a 52 | 65 70 6c 79 2d 54 6f 3a |on Vul.R|eply-To:|
|00000280| 20 63 65 72 74 2d 61 64 | 76 69 73 6f 72 79 2d 72 | cert-ad|visory-r|
|00000290| 65 71 75 65 73 74 40 63 | 65 72 74 2e 6f 72 67 0a |equest@c|ert.org.|
|000002a0| 4f 72 67 61 6e 69 7a 61 | 74 69 6f 6e 3a 20 43 45 |Organiza|tion: CE|
|000002b0| 52 54 28 73 6d 29 20 43 | 6f 6f 72 64 69 6e 61 74 |RT(sm) C|oordinat|
|000002c0| 69 6f 6e 20 43 65 6e 74 | 65 72 20 2d 20 20 2b 31 |ion Cent|er -  +1|
|000002d0| 20 34 31 32 2d 32 36 38 | 2d 37 30 39 30 0a 53 74 | 412-268|-7090.St|
|000002e0| 61 74 75 73 3a 20 52 4f | 0a 58 2d 53 74 61 74 75 |atus: RO|.X-Statu|
|000002f0| 73 3a 20 0a 0a 43 45 52 | 54 20 56 65 6e 64 6f 72 |s: ..CER|T Vendor|
|00000300| 2d 49 6e 69 74 69 61 74 | 65 64 20 42 75 6c 6c 65 |-Initiat|ed Bulle|
|00000310| 74 69 6e 20 56 42 2d 39 | 35 3a 30 38 0a 4e 6f 76 |tin VB-9|5:08.Nov|
|00000320| 65 6d 62 65 72 20 32 2c | 20 31 39 39 35 0a 0a 54 |ember 2,| 1995..T|
|00000330| 6f 70 69 63 3a 20 58 20 | 41 75 74 68 65 6e 74 69 |opic: X |Authenti|
|00000340| 63 61 74 69 6f 6e 20 56 | 75 6c 6e 65 72 61 62 69 |cation V|ulnerabi|
|00000350| 6c 69 74 79 20 0a 53 6f | 75 72 63 65 3a 20 58 20 |lity .So|urce: X |
|00000360| 43 6f 6e 73 6f 72 74 69 | 75 6d 0a 0a 54 6f 20 61 |Consorti|um..To a|
|00000370| 69 64 20 69 6e 20 74 68 | 65 20 77 69 64 65 20 64 |id in th|e wide d|
|00000380| 69 73 74 72 69 62 75 74 | 69 6f 6e 20 6f 66 20 65 |istribut|ion of e|
|00000390| 73 73 65 6e 74 69 61 6c | 20 73 65 63 75 72 69 74 |ssential| securit|
|000003a0| 79 20 69 6e 66 6f 72 6d | 61 74 69 6f 6e 2c 20 74 |y inform|ation, t|
|000003b0| 68 65 0a 43 45 52 54 20 | 43 6f 6f 72 64 69 6e 61 |he.CERT |Coordina|
|000003c0| 74 69 6f 6e 20 43 65 6e | 74 65 72 20 69 73 20 66 |tion Cen|ter is f|
|000003d0| 6f 72 77 61 72 64 69 6e | 67 20 74 68 65 20 66 6f |orwardin|g the fo|
|000003e0| 6c 6c 6f 77 69 6e 67 20 | 69 6e 66 6f 72 6d 61 74 |llowing |informat|
|000003f0| 69 6f 6e 20 66 72 6f 6d | 0a 74 68 65 20 58 20 43 |ion from|.the X C|
|00000400| 6f 6e 73 6f 72 74 69 75 | 6d 2e 20 54 68 65 20 58 |onsortiu|m. The X|
|00000410| 20 43 6f 6e 73 6f 72 74 | 69 75 6d 20 75 72 67 65 | Consort|ium urge|
|00000420| 73 20 79 6f 75 20 74 6f | 20 61 63 74 20 6f 6e 20 |s you to| act on |
|00000430| 74 68 69 73 0a 69 6e 66 | 6f 72 6d 61 74 69 6f 6e |this.inf|ormation|
|00000440| 20 61 73 20 73 6f 6f 6e | 20 61 73 20 70 6f 73 73 | as soon| as poss|
|00000450| 69 62 6c 65 2e 20 58 20 | 43 6f 6e 73 6f 72 74 69 |ible. X |Consorti|
|00000460| 75 6d 20 63 6f 6e 74 61 | 63 74 20 69 6e 66 6f 72 |um conta|ct infor|
|00000470| 6d 61 74 69 6f 6e 20 69 | 73 0a 69 6e 63 6c 75 64 |mation i|s.includ|
|00000480| 65 64 20 69 6e 20 74 68 | 65 20 66 6f 72 77 61 72 |ed in th|e forwar|
|00000490| 64 65 64 20 74 65 78 74 | 20 62 65 6c 6f 77 3b 20 |ded text| below; |
|000004a0| 70 6c 65 61 73 65 20 63 | 6f 6e 74 61 63 74 20 74 |please c|ontact t|
|000004b0| 68 65 6d 20 69 66 20 79 | 6f 75 20 68 61 76 65 0a |hem if y|ou have.|
|000004c0| 61 6e 79 20 71 75 65 73 | 74 69 6f 6e 73 20 6f 72 |any ques|tions or|
|000004d0| 20 6e 65 65 64 20 66 75 | 72 74 68 65 72 20 69 6e | need fu|rther in|
|000004e0| 66 6f 72 6d 61 74 69 6f | 6e 2e 0a 0a 0a 3d 3d 3d |formatio|n....===|
|000004f0| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00000500| 3d 3d 3d 3d 3d 46 4f 52 | 57 41 52 44 45 44 20 54 |=====FOR|WARDED T|
|00000510| 45 58 54 20 53 54 41 52 | 54 53 20 48 45 52 45 3d |EXT STAR|TS HERE=|
|00000520| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00000530| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 0a 0a 54 77 6f |========|===..Two|
|00000540| 20 77 69 64 65 6c 79 20 | 75 73 65 64 20 58 20 57 | widely |used X W|
|00000550| 69 6e 64 6f 77 20 53 79 | 73 74 65 6d 20 61 75 74 |indow Sy|stem aut|
|00000560| 68 6f 72 69 7a 61 74 69 | 6f 6e 20 73 63 68 65 6d |horizati|on schem|
|00000570| 65 73 20 68 61 76 65 20 | 77 65 61 6b 6e 65 73 73 |es have |weakness|
|00000580| 65 73 0a 69 6e 20 74 68 | 65 20 73 61 6d 70 6c 65 |es.in th|e sample|
|00000590| 20 69 6d 70 6c 65 6d 65 | 6e 74 61 74 69 6f 6e 2e | impleme|ntation.|
|000005a0| 20 20 54 68 65 73 65 20 | 77 65 61 6b 6e 65 73 73 |  These |weakness|
|000005b0| 65 73 20 63 6f 75 6c 64 | 20 61 6c 6c 6f 77 0a 75 |es could| allow.u|
|000005c0| 6e 61 75 74 68 6f 72 69 | 7a 65 64 20 72 65 6d 6f |nauthori|zed remo|
|000005d0| 74 65 20 75 73 65 72 73 | 20 74 6f 20 63 6f 6e 6e |te users| to conn|
|000005e0| 65 63 74 20 74 6f 20 58 | 20 64 69 73 70 6c 61 79 |ect to X| display|
|000005f0| 73 20 61 6e 64 20 61 72 | 65 20 70 72 65 73 65 6e |s and ar|e presen|
|00000600| 74 20 69 6e 0a 58 31 31 | 20 52 65 6c 65 61 73 65 |t in.X11| Release|
|00000610| 20 36 20 61 6e 64 20 65 | 61 72 6c 69 65 72 20 72 | 6 and e|arlier r|
|00000620| 65 6c 65 61 73 65 73 20 | 6f 66 20 74 68 65 20 58 |eleases |of the X|
|00000630| 31 31 20 73 61 6d 70 6c | 65 20 69 6d 70 6c 65 6d |11 sampl|e implem|
|00000640| 65 6e 74 61 74 69 6f 6e | 2e 0a 0a 54 68 65 72 65 |entation|...There|
|00000650| 20 61 72 65 20 72 65 70 | 6f 72 74 73 20 74 68 61 | are rep|orts tha|
|00000660| 74 20 73 79 73 74 65 6d | 73 20 68 61 76 65 20 62 |t system|s have b|
|00000670| 65 65 6e 20 62 72 6f 6b | 65 6e 20 69 6e 74 6f 20 |een brok|en into |
|00000680| 75 73 69 6e 67 20 61 74 | 0a 6c 65 61 73 74 20 6f |using at|.least o|
|00000690| 6e 65 20 6f 66 20 74 68 | 65 73 65 20 77 65 61 6b |ne of th|ese weak|
|000006a0| 6e 65 73 73 65 73 20 61 | 6e 64 20 74 68 61 74 20 |nesses a|nd that |
|000006b0| 74 68 65 72 65 20 61 72 | 65 20 6e 6f 77 20 65 78 |there ar|e now ex|
|000006c0| 70 6c 6f 69 74 0a 70 72 | 6f 67 72 61 6d 73 20 61 |ploit.pr|ograms a|
|000006d0| 76 61 69 6c 61 62 6c 65 | 20 69 6e 20 74 68 65 20 |vailable| in the |
|000006e0| 69 6e 74 72 75 64 65 72 | 20 63 6f 6d 6d 75 6e 69 |intruder| communi|
|000006f0| 74 79 2e 0a 0a 0a 4d 49 | 54 2d 4d 41 47 49 43 2d |ty....MI|T-MAGIC-|
|00000700| 43 4f 4f 4b 49 45 2d 31 | 20 44 65 73 63 72 69 70 |COOKIE-1| Descrip|
|00000710| 74 69 6f 6e 3a 0a 0a 4f | 6e 20 73 79 73 74 65 6d |tion:..O|n system|
|00000720| 73 20 6f 6e 20 77 68 69 | 63 68 20 78 64 6d 20 69 |s on whi|ch xdm i|
|00000730| 73 20 62 75 69 6c 74 20 | 77 69 74 68 6f 75 74 20 |s built |without |
|00000740| 74 68 65 20 48 61 73 58 | 64 6d 41 75 74 68 20 63 |the HasX|dmAuth c|
|00000750| 6f 6e 66 69 67 20 6f 70 | 74 69 6f 6e 2c 0a 74 68 |onfig op|tion,.th|
|00000760| 65 20 4d 49 54 2d 4d 41 | 47 49 43 2d 43 4f 4f 4b |e MIT-MA|GIC-COOK|
|00000770| 49 45 2d 31 20 6b 65 79 | 20 67 65 6e 65 72 61 74 |IE-1 key| generat|
|00000780| 65 64 20 62 79 20 78 64 | 6d 20 6d 61 79 20 62 65 |ed by xd|m may be|
|00000790| 20 67 75 65 73 73 61 62 | 6c 65 2e 0a 0a 49 66 20 | guessab|le...If |
|000007a0| 79 6f 75 20 75 73 65 20 | 4d 49 54 2d 4d 41 47 49 |you use |MIT-MAGI|
|000007b0| 43 2d 43 4f 4f 4b 49 45 | 2d 31 20 74 6f 20 61 75 |C-COOKIE|-1 to au|
|000007c0| 74 68 65 6e 74 69 63 61 | 74 65 20 58 20 63 6f 6e |thentica|te X con|
|000007d0| 6e 65 63 74 69 6f 6e 73 | 2c 20 61 6e 64 0a 79 6f |nections|, and.yo|
|000007e0| 75 72 20 6b 65 79 73 20 | 61 72 65 20 67 65 6e 65 |ur keys |are gene|
|000007f0| 72 61 74 65 64 20 62 79 | 20 78 64 6d 2c 20 61 6e |rated by| xdm, an|
|00000800| 64 20 78 64 6d 20 64 6f | 65 73 20 6e 6f 74 20 61 |d xdm do|es not a|
|00000810| 6c 73 6f 20 73 75 70 70 | 6f 72 74 0a 58 44 4d 2d |lso supp|ort.XDM-|
|00000820| 41 55 54 48 4f 52 49 5a | 41 54 49 4f 4e 2d 31 20 |AUTHORIZ|ATION-1 |
|00000830| 61 75 74 68 65 6e 74 69 | 63 61 74 69 6f 6e 20 28 |authenti|cation (|
|00000840| 74 68 61 74 20 69 73 2c | 20 79 6f 75 72 20 58 20 |that is,| your X |
|00000850| 74 72 65 65 20 77 61 73 | 20 6e 6f 74 0a 62 75 69 |tree was| not.bui|
|00000860| 6c 74 20 77 69 74 68 20 | 74 68 65 20 48 61 73 58 |lt with |the HasX|
|00000870| 64 6d 41 75 74 68 20 63 | 6f 6e 66 69 67 20 6f 70 |dmAuth c|onfig op|
|00000880| 74 69 6f 6e 29 2c 20 79 | 6f 75 20 6d 61 79 20 62 |tion), y|ou may b|
|00000890| 65 20 61 74 20 72 69 73 | 6b 2e 0a 0a 4f 6e 20 73 |e at ris|k...On s|
|000008a0| 79 73 74 65 6d 73 20 77 | 69 74 68 20 70 6f 6f 72 |ystems w|ith poor|
|000008b0| 20 70 73 65 75 64 6f 2d | 72 61 6e 64 6f 6d 20 6e | pseudo-|random n|
|000008c0| 75 6d 62 65 72 20 67 65 | 6e 65 72 61 74 6f 72 73 |umber ge|nerators|
|000008d0| 2c 20 74 68 65 20 6b 65 | 79 20 6d 61 79 20 62 65 |, the ke|y may be|
|000008e0| 0a 67 75 65 73 73 61 62 | 6c 65 20 62 79 20 72 65 |.guessab|le by re|
|000008f0| 6d 6f 74 65 20 75 73 65 | 72 73 2e 20 20 4f 6e 20 |mote use|rs.  On |
|00000900| 6f 74 68 65 72 20 73 79 | 73 74 65 6d 73 2c 20 75 |other sy|stems, u|
|00000910| 73 65 72 73 20 77 69 74 | 68 20 61 63 63 65 73 73 |sers wit|h access|
|00000920| 20 74 6f 20 74 68 65 0a | 66 69 6c 65 20 73 79 73 | to the.|file sys|
|00000930| 74 65 6d 20 77 68 65 72 | 65 20 78 64 6d 20 73 74 |tem wher|e xdm st|
|00000940| 6f 72 65 73 20 69 74 73 | 20 6b 65 79 73 20 66 6f |ores its| keys fo|
|00000950| 72 20 75 73 65 20 62 79 | 20 6c 6f 63 61 6c 20 73 |r use by| local s|
|00000960| 65 72 76 65 72 73 20 6d | 61 79 20 62 65 0a 61 62 |ervers m|ay be.ab|
|00000970| 6c 65 20 74 6f 20 75 73 | 65 20 69 6e 66 6f 72 6d |le to us|e inform|
|00000980| 61 74 69 6f 6e 20 69 6e | 20 74 68 65 20 66 69 6c |ation in| the fil|
|00000990| 65 20 73 79 73 74 65 6d | 20 74 6f 20 67 75 65 73 |e system| to gues|
|000009a0| 73 20 74 68 65 20 6b 65 | 79 2e 0a 0a 49 66 20 79 |s the ke|y...If y|
|000009b0| 6f 75 72 20 78 64 6d 20 | 70 72 6f 67 72 61 6d 20 |our xdm |program |
|000009c0| 77 61 73 20 62 75 69 6c | 74 20 77 69 74 68 20 48 |was buil|t with H|
|000009d0| 61 73 58 64 6d 41 75 74 | 68 20 73 65 74 20 74 6f |asXdmAut|h set to|
|000009e0| 20 59 45 53 20 28 74 68 | 65 20 63 6f 6d 70 69 6c | YES (th|e compil|
|000009f0| 65 72 0a 63 6f 6d 6d 61 | 6e 64 20 6c 69 6e 65 20 |er.comma|nd line |
|00000a00| 69 6e 63 6c 75 64 65 73 | 20 74 68 65 20 2d 44 48 |includes| the -DH|
|00000a10| 41 53 58 44 4d 41 55 54 | 48 20 66 6c 61 67 29 2c |ASXDMAUT|H flag),|
|00000a20| 20 4d 49 54 2d 4d 41 47 | 49 43 2d 43 4f 4f 4b 49 | MIT-MAG|IC-COOKI|
|00000a30| 45 2d 31 20 6b 65 79 73 | 0a 67 65 6e 65 72 61 74 |E-1 keys|.generat|
|00000a40| 65 64 20 62 79 20 78 64 | 6d 20 61 72 65 20 6e 6f |ed by xd|m are no|
|00000a50| 74 20 76 75 6c 6e 65 72 | 61 62 6c 65 3b 20 74 68 |t vulner|able; th|
|00000a60| 65 20 44 45 53 20 63 6f | 64 65 20 69 73 20 75 73 |e DES co|de is us|
|00000a70| 65 64 20 74 6f 20 67 65 | 6e 65 72 61 74 65 0a 63 |ed to ge|nerate.c|
|00000a80| 72 79 70 74 6f 67 72 61 | 70 68 69 63 61 6c 6c 79 |ryptogra|phically|
|00000a90| 20 73 65 63 75 72 65 20 | 6b 65 79 73 2e 0a 0a 49 | secure |keys...I|
|00000aa0| 6d 70 61 63 74 0a 0a 52 | 65 6d 6f 74 65 20 75 73 |mpact..R|emote us|
|00000ab0| 65 72 73 20 61 6e 79 77 | 68 65 72 65 20 6f 6e 20 |ers anyw|here on |
|00000ac0| 74 68 65 20 49 6e 74 65 | 72 6e 65 74 20 6d 61 79 |the Inte|rnet may|
|00000ad0| 20 62 65 20 61 62 6c 65 | 20 74 6f 20 63 6f 6e 6e | be able| to conn|
|00000ae0| 65 63 74 20 74 6f 20 79 | 6f 75 72 0a 58 20 64 69 |ect to y|our.X di|
|00000af0| 73 70 6c 61 79 20 73 65 | 72 76 65 72 2e 20 20 49 |splay se|rver.  I|
|00000b00| 74 20 69 73 20 4e 4f 54 | 20 6e 65 63 65 73 73 61 |t is NOT| necessa|
|00000b10| 72 79 20 74 68 61 74 20 | 74 68 65 79 20 62 65 20 |ry that |they be |
|00000b20| 61 62 6c 65 20 74 6f 20 | 73 6e 6f 6f 70 20 79 6f |able to |snoop yo|
|00000b30| 75 72 0a 6b 65 79 20 66 | 69 72 73 74 2e 0a 0a 0a |ur.key f|irst....|
|00000b40| 58 44 4d 2d 41 55 54 48 | 4f 52 49 5a 41 54 49 4f |XDM-AUTH|ORIZATIO|
|00000b50| 4e 2d 31 20 44 65 73 63 | 72 69 70 74 69 6f 6e 3a |N-1 Desc|ription:|
|00000b60| 0a 0a 54 68 65 20 58 20 | 73 65 72 76 65 72 20 64 |..The X |server d|
|00000b70| 6f 65 73 20 6e 6f 74 20 | 63 6f 72 72 65 63 74 6c |oes not |correctl|
|00000b80| 79 20 63 68 65 63 6b 20 | 74 68 65 20 58 44 4d 2d |y check |the XDM-|
|00000b90| 41 55 54 48 4f 52 49 5a | 41 54 49 4f 4e 2d 31 20 |AUTHORIZ|ATION-1 |
|00000ba0| 64 61 74 61 20 61 6e 64 | 0a 63 61 6e 20 62 65 20 |data and|.can be |
|00000bb0| 66 6f 6f 6c 65 64 20 69 | 6e 74 6f 20 61 63 63 65 |fooled i|nto acce|
|00000bc0| 70 74 69 6e 67 20 69 6e | 76 61 6c 69 64 20 64 61 |pting in|valid da|
|00000bd0| 74 61 2e 0a 0a 41 20 75 | 73 65 72 20 77 68 6f 20 |ta...A u|ser who |
|00000be0| 63 61 6e 20 73 6e 6f 6f | 70 20 74 68 65 20 65 6e |can snoo|p the en|
|00000bf0| 63 72 79 70 74 65 64 20 | 61 75 74 68 6f 72 69 7a |crypted |authoriz|
|00000c00| 61 74 69 6f 6e 20 64 61 | 74 61 20 6f 66 20 61 20 |ation da|ta of a |
|00000c10| 76 61 6c 69 64 0a 63 6f | 6e 6e 65 63 74 69 6f 6e |valid.co|nnection|
|00000c20| 20 63 61 6e 20 63 72 65 | 61 74 65 20 66 61 6b 65 | can cre|ate fake|
|00000c30| 20 61 75 74 68 20 64 61 | 74 61 20 74 68 61 74 20 | auth da|ta that |
|00000c40| 74 68 65 20 58 20 73 65 | 72 76 65 72 20 77 69 6c |the X se|rver wil|
|00000c50| 6c 20 61 63 63 65 70 74 | 2e 0a 0a 49 66 20 79 6f |l accept|...If yo|
|00000c60| 75 20 64 6f 20 6e 6f 74 | 20 75 73 65 20 58 44 4d |u do not| use XDM|
|00000c70| 2d 41 55 54 48 4f 52 49 | 5a 41 54 49 4f 4e 2d 31 |-AUTHORI|ZATION-1|
|00000c80| 2c 20 79 6f 75 20 61 72 | 65 20 6e 6f 74 20 76 75 |, you ar|e not vu|
|00000c90| 6c 6e 65 72 61 62 6c 65 | 2e 0a 0a 44 65 74 65 72 |lnerable|...Deter|
|00000ca0| 6d 69 6e 69 6e 67 20 77 | 68 65 74 68 65 72 20 79 |mining w|hether y|
|00000cb0| 6f 75 72 20 73 65 72 76 | 65 72 20 69 73 20 76 75 |our serv|er is vu|
|00000cc0| 6c 6e 65 72 61 62 6c 65 | 3a 20 74 68 69 73 20 70 |lnerable|: this p|
|00000cd0| 72 6f 62 6c 65 6d 20 69 | 73 20 66 69 78 65 64 0a |roblem i|s fixed.|
|00000ce0| 69 6e 20 58 20 73 65 72 | 76 65 72 73 20 66 72 6f |in X ser|vers fro|
|00000cf0| 6d 20 74 68 65 20 58 20 | 43 6f 6e 73 6f 72 74 69 |m the X |Consorti|
|00000d00| 75 6d 20 77 69 74 68 20 | 61 20 76 65 6e 64 6f 72 |um with |a vendor|
|00000d10| 20 72 65 6c 65 61 73 65 | 20 6e 75 6d 62 65 72 20 | release| number |
|00000d20| 6f 66 0a 36 30 30 31 20 | 6f 72 20 68 69 67 68 65 |of.6001 |or highe|
|00000d30| 72 2e 0a 0a 49 6d 70 61 | 63 74 0a 0a 52 65 6d 6f |r...Impa|ct..Remo|
|00000d40| 74 65 20 75 73 65 72 73 | 20 6d 61 79 20 62 65 20 |te users| may be |
|00000d50| 61 62 6c 65 20 74 6f 20 | 63 6f 6e 6e 65 63 74 20 |able to |connect |
|00000d60| 74 6f 20 79 6f 75 72 20 | 58 20 64 69 73 70 6c 61 |to your |X displa|
|00000d70| 79 20 73 65 72 76 65 72 | 2e 0a 0a 0a 0a 53 4f 4c |y server|.....SOL|
|00000d80| 55 54 49 4f 4e 53 0a 0a | 41 2e 20 20 49 6e 73 74 |UTIONS..|A.  Inst|
|00000d90| 61 6c 6c 20 61 20 76 65 | 6e 64 6f 72 20 73 75 70 |all a ve|ndor sup|
|00000da0| 70 6c 69 65 64 20 70 61 | 74 63 68 20 69 66 20 61 |plied pa|tch if a|
|00000db0| 76 61 69 6c 61 62 6c 65 | 2e 0a 0a 42 2e 20 20 49 |vailable|...B.  I|
|00000dc0| 66 20 79 6f 75 72 20 73 | 69 74 65 20 69 73 20 75 |f your s|ite is u|
|00000dd0| 73 69 6e 67 20 58 31 31 | 20 62 75 69 6c 74 20 66 |sing X11| built f|
|00000de0| 72 6f 6d 20 58 20 43 6f | 6e 73 6f 72 74 69 75 6d |rom X Co|nsortium|
|00000df0| 20 58 31 31 52 36 20 73 | 6f 75 72 63 65 73 2c 0a | X11R6 s|ources,.|
|00000e00| 69 6e 73 74 61 6c 6c 20 | 70 75 62 6c 69 63 20 70 |install |public p|
|00000e10| 61 74 63 68 20 23 31 33 | 2e 20 20 54 68 69 73 20 |atch #13|.  This |
|00000e20| 70 61 74 63 68 20 69 73 | 20 61 76 61 69 6c 61 62 |patch is| availab|
|00000e30| 6c 65 20 76 69 61 20 61 | 6e 6f 6e 79 6d 6f 75 73 |le via a|nonymous|
|00000e40| 20 0a 46 54 50 20 66 72 | 6f 6d 20 66 74 70 2e 78 | .FTP fr|om ftp.x|
|00000e50| 2e 6f 72 67 20 61 73 20 | 74 68 65 20 66 69 6c 65 |.org as |the file|
|00000e60| 20 2f 70 75 62 2f 52 36 | 2f 66 69 78 65 73 2f 66 | /pub/R6|/fixes/f|
|00000e70| 69 78 2d 31 33 2e 20 20 | 49 74 20 69 73 20 61 6c |ix-13.  |It is al|
|00000e80| 73 6f 20 0a 61 76 61 69 | 6c 61 62 6c 65 20 66 72 |so .avai|lable fr|
|00000e90| 6f 6d 20 74 68 65 20 6d | 61 6e 79 20 73 69 74 65 |om the m|any site|
|00000ea0| 73 20 74 68 61 74 20 6d | 69 72 72 6f 72 20 66 74 |s that m|irror ft|
|00000eb0| 70 2e 78 2e 6f 72 67 2e | 20 20 41 70 70 6c 79 20 |p.x.org.|  Apply |
|00000ec0| 61 6c 6c 20 70 61 74 63 | 68 65 73 20 0a 6e 6f 74 |all patc|hes .not|
|00000ed0| 20 61 6c 72 65 61 64 79 | 20 61 70 70 6c 69 65 64 | already| applied|
|00000ee0| 2c 20 75 70 20 74 6f 20 | 61 6e 64 20 69 6e 63 6c |, up to |and incl|
|00000ef0| 75 64 69 6e 67 20 66 69 | 78 2d 31 33 2e 20 20 54 |uding fi|x-13.  T|
|00000f00| 68 65 20 66 69 6c 65 20 | 78 63 2f 62 75 67 2d 72 |he file |xc/bug-r|
|00000f10| 65 70 6f 72 74 0a 73 68 | 6f 77 73 20 77 68 61 74 |eport.sh|ows what|
|00000f20| 20 70 75 62 6c 69 63 20 | 70 61 74 63 68 65 73 20 | public |patches |
|00000f30| 68 61 76 65 20 62 65 65 | 6e 20 61 6c 72 65 61 64 |have bee|n alread|
|00000f40| 79 20 61 70 70 6c 69 65 | 64 20 74 6f 20 79 6f 75 |y applie|d to you|
|00000f50| 72 20 73 6f 75 72 63 65 | 0a 74 72 65 65 2e 0a 0a |r source|.tree...|
|00000f60| 54 68 65 20 4d 44 35 20 | 63 68 65 63 6b 73 75 6d |The MD5 |checksum|
|00000f70| 20 6f 66 20 66 69 78 2d | 31 33 20 69 73 20 61 73 | of fix-|13 is as|
|00000f80| 20 66 6f 6c 6c 6f 77 73 | 3a 0a 0a 4d 44 35 20 28 | follows|:..MD5 (|
|00000f90| 66 69 78 2d 31 33 29 20 | 3d 20 30 64 38 31 64 38 |fix-13) |= 0d81d8|
|00000fa0| 34 33 61 63 66 38 30 33 | 61 38 62 65 64 66 39 30 |43acf803|a8bedf90|
|00000fb0| 64 33 61 31 38 62 39 65 | 64 36 0a 0a 43 2e 20 20 |d3a18b9e|d6..C.  |
|00000fc0| 49 66 20 79 6f 75 72 20 | 73 69 74 65 20 69 73 20 |If your |site is |
|00000fd0| 75 73 69 6e 67 20 61 6e | 20 65 61 72 6c 69 65 72 |using an| earlier|
|00000fe0| 20 76 65 72 73 69 6f 6e | 20 6f 66 20 74 68 65 20 | version| of the |
|00000ff0| 58 20 43 6f 6e 73 6f 72 | 74 69 75 6d 27 73 20 58 |X Consor|tium's X|
|00001000| 31 31 2c 0a 75 70 67 72 | 61 64 65 20 74 6f 20 58 |11,.upgr|ade to X|
|00001010| 31 31 52 36 2e 20 20 49 | 6e 73 74 61 6c 6c 20 61 |11R6.  I|nstall a|
|00001020| 6c 6c 20 70 61 74 63 68 | 65 73 20 75 70 20 74 6f |ll patch|es up to|
|00001030| 20 61 6e 64 20 69 6e 63 | 6c 75 64 69 6e 67 20 66 | and inc|luding f|
|00001040| 69 78 2d 31 33 2e 0a 0a | 44 2e 20 20 57 6f 72 6b |ix-13...|D.  Work|
|00001050| 20 61 72 6f 75 6e 64 73 | 2e 0a 0a 31 2e 20 20 42 | arounds|...1.  B|
|00001060| 75 69 6c 64 69 6e 67 20 | 77 69 74 68 20 48 61 73 |uilding |with Has|
|00001070| 58 64 6d 41 75 74 68 20 | 77 69 6c 6c 20 65 6c 69 |XdmAuth |will eli|
|00001080| 6d 69 6e 61 74 65 20 74 | 68 65 20 66 69 72 73 74 |minate t|he first|
|00001090| 20 76 75 6c 6e 65 72 61 | 62 69 6c 69 74 79 2e 0a | vulnera|bility..|
|000010a0| 54 68 65 20 6e 65 63 65 | 73 73 61 72 79 20 44 45 |The nece|ssary DE|
|000010b0| 53 20 63 6f 64 65 20 69 | 73 20 61 76 61 69 6c 61 |S code i|s availa|
|000010c0| 62 6c 65 20 66 6f 72 20 | 46 54 50 20 66 72 6f 6d |ble for |FTP from|
|000010d0| 20 62 6f 74 68 20 69 6e | 73 69 64 65 20 74 68 65 | both in|side the|
|000010e0| 0a 55 53 20 28 66 6f 72 | 20 55 53 20 73 69 74 65 |.US (for| US site|
|000010f0| 73 20 6f 6e 6c 79 29 20 | 61 6e 64 20 6f 75 74 73 |s only) |and outs|
|00001100| 69 64 65 20 28 66 6f 72 | 20 6e 6f 6e 2d 55 53 20 |ide (for| non-US |
|00001110| 73 69 74 65 73 29 2e 20 | 20 52 65 61 64 0a 3c 66 |sites). | Read.<f|
|00001120| 74 70 3a 2f 2f 66 74 70 | 2e 78 2e 6f 72 67 2f 70 |tp://ftp|.x.org/p|
|00001130| 75 62 2f 52 36 2f 78 64 | 6d 2d 61 75 74 68 2f 52 |ub/R6/xd|m-auth/R|
|00001140| 45 41 44 4d 45 3e 20 66 | 6f 72 20 64 65 74 61 69 |EADME> f|or detai|
|00001150| 6c 73 20 6f 6e 20 6f 62 | 74 61 69 6e 69 6e 67 0a |ls on ob|taining.|
|00001160| 74 68 69 73 20 63 6f 64 | 65 2e 0a 0a 32 2e 20 20 |this cod|e...2.  |
|00001170| 49 66 20 79 6f 75 20 63 | 61 6e 6e 6f 74 20 75 73 |If you c|annot us|
|00001180| 65 20 44 45 53 2c 20 79 | 6f 75 20 63 61 6e 20 64 |e DES, y|ou can d|
|00001190| 65 74 65 72 6d 69 6e 65 | 20 79 6f 75 72 20 65 78 |etermine| your ex|
|000011a0| 70 6f 73 75 72 65 20 74 | 6f 0a 72 65 6d 6f 74 65 |posure t|o.remote|
|000011b0| 20 61 74 74 61 63 6b 65 | 72 73 20 62 79 20 74 65 | attacke|rs by te|
|000011c0| 73 74 69 6e 67 20 74 68 | 65 20 73 74 72 65 6e 67 |sting th|e streng|
|000011d0| 74 68 20 6f 66 20 79 6f | 75 72 20 72 61 6e 64 28 |th of yo|ur rand(|
|000011e0| 29 20 66 75 6e 63 74 69 | 6f 6e 0a 75 73 69 6e 67 |) functi|on.using|
|000011f0| 20 74 68 65 20 70 72 6f | 67 72 61 6d 20 72 61 6e | the pro|gram ran|
|00001200| 64 2d 74 65 73 74 3b 20 | 74 68 65 20 73 6f 75 72 |d-test; |the sour|
|00001210| 63 65 20 69 73 20 61 76 | 61 69 6c 61 62 6c 65 20 |ce is av|ailable |
|00001220| 61 73 0a 3c 66 74 70 3a | 2f 2f 66 74 70 2e 78 2e |as.<ftp:|//ftp.x.|
|00001230| 6f 72 67 2f 70 75 62 2f | 44 4f 43 53 2f 72 61 6e |org/pub/|DOCS/ran|
|00001240| 64 2d 74 65 73 74 2f 72 | 61 6e 64 2d 74 65 73 74 |d-test/r|and-test|
|00001250| 2e 63 3e 2e 0a 0a 33 2e | 20 20 4c 69 6d 69 74 69 |.c>...3.|  Limiti|
|00001260| 6e 67 20 75 73 65 20 6f | 66 20 58 20 63 6f 6e 6e |ng use o|f X conn|
|00001270| 65 63 74 69 6f 6e 73 20 | 75 73 69 6e 67 20 58 44 |ections |using XD|
|00001280| 4d 2d 41 55 54 48 4f 52 | 49 5a 41 54 49 4f 4e 2d |M-AUTHOR|IZATION-|
|00001290| 31 20 74 6f 20 74 72 75 | 73 74 65 64 0a 6e 65 74 |1 to tru|sted.net|
|000012a0| 77 6f 72 6b 73 20 77 69 | 6c 6c 20 70 72 65 76 65 |works wi|ll preve|
|000012b0| 6e 74 20 75 6e 61 75 74 | 68 6f 72 69 7a 65 64 20 |nt unaut|horized |
|000012c0| 70 61 72 74 69 65 73 20 | 66 72 6f 6d 20 73 6e 6f |parties |from sno|
|000012d0| 6f 70 69 6e 67 20 58 20 | 70 72 6f 74 6f 63 6f 6c |oping X |protocol|
|000012e0| 0a 74 72 61 66 66 69 63 | 2c 20 74 68 75 73 20 70 |.traffic|, thus p|
|000012f0| 72 65 76 65 6e 74 69 6e | 67 20 65 78 70 6c 6f 69 |reventin|g exploi|
|00001300| 74 61 74 69 6f 6e 20 6f | 66 20 74 68 65 20 73 65 |tation o|f the se|
|00001310| 63 6f 6e 64 20 76 75 6c | 6e 65 72 61 62 69 6c 69 |cond vul|nerabili|
|00001320| 74 79 2e 0a 0a 0a 41 63 | 6b 6e 6f 77 6c 65 64 67 |ty....Ac|knowledg|
|00001330| 65 6d 65 6e 74 73 3a 20 | 54 68 65 20 58 20 43 6f |ements: |The X Co|
|00001340| 6e 73 6f 72 74 69 75 6d | 20 77 6f 75 6c 64 20 6c |nsortium| would l|
|00001350| 69 6b 65 20 74 6f 20 74 | 68 61 6e 6b 20 43 68 72 |ike to t|hank Chr|
|00001360| 69 73 20 48 61 6c 6c 20 | 6f 66 0a 74 68 65 20 55 |is Hall |of.the U|
|00001370| 6e 69 76 65 72 73 69 74 | 79 20 6f 66 20 43 6f 6c |niversit|y of Col|
|00001380| 6f 72 61 64 6f 20 66 6f | 72 20 61 6e 61 6c 79 7a |orado fo|r analyz|
|00001390| 69 6e 67 20 74 68 65 73 | 65 20 70 72 6f 62 6c 65 |ing thes|e proble|
|000013a0| 6d 73 20 61 6e 64 20 62 | 72 69 6e 67 69 6e 67 0a |ms and b|ringing.|
|000013b0| 74 68 65 6d 20 74 6f 20 | 6f 75 72 20 61 74 74 65 |them to |our atte|
|000013c0| 6e 74 69 6f 6e 2e 0a 0a | 0c 0a 2d 2d 2d 2d 2d 2d |ntion...|..------|
|000013d0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|000013e0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|000013f0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00001400| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 0a 0a 20 20 20 |--------|---..   |
|00001410| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00001420| 20 20 20 20 20 20 20 56 | 65 6e 64 6f 72 20 53 74 |       V|endor St|
|00001430| 61 74 75 73 0a 0a 54 68 | 65 20 66 6f 6c 6c 6f 77 |atus..Th|e follow|
|00001440| 69 6e 67 20 69 6e 66 6f | 72 6d 61 74 69 6f 6e 20 |ing info|rmation |
|00001450| 77 61 73 20 73 75 70 70 | 6c 69 65 64 20 62 79 20 |was supp|lied by |
|00001460| 76 65 6e 64 6f 72 73 20 | 66 6f 72 20 74 68 69 73 |vendors |for this|
|00001470| 20 62 75 6c 6c 65 74 69 | 6e 2e 0a 54 68 65 20 58 | bulleti|n..The X|
|00001480| 20 43 6f 6e 73 6f 72 74 | 69 75 6d 20 61 6e 64 20 | Consort|ium and |
|00001490| 43 45 52 54 20 68 61 76 | 65 20 6e 6f 74 20 76 65 |CERT hav|e not ve|
|000014a0| 72 69 66 69 65 64 20 74 | 68 69 73 20 69 6e 66 6f |rified t|his info|
|000014b0| 72 6d 61 74 69 6f 6e 2e | 0a 0a 0a 43 72 61 79 20 |rmation.|...Cray |
|000014c0| 52 65 73 65 61 72 63 68 | 0a 0a 55 4e 49 43 4f 53 |Research|..UNICOS|
|000014d0| 20 38 2e 30 20 61 6e 64 | 20 39 2e 30 20 61 72 65 | 8.0 and| 9.0 are|
|000014e0| 20 6e 6f 74 20 76 75 6c | 6e 65 72 61 62 6c 65 2e | not vul|nerable.|
|000014f0| 20 20 54 68 65 73 65 20 | 73 79 73 74 65 6d 73 20 |  These |systems |
|00001500| 68 61 76 65 20 72 6f 62 | 75 73 74 20 0a 70 73 65 |have rob|ust .pse|
|00001510| 75 64 6f 2d 72 61 6e 64 | 6f 6d 20 6e 75 6d 62 65 |udo-rand|om numbe|
|00001520| 72 20 67 65 6e 65 72 61 | 74 6f 72 73 2c 20 6d 61 |r genera|tors, ma|
|00001530| 6b 69 6e 67 20 74 68 65 | 6d 20 6e 6f 74 20 76 75 |king the|m not vu|
|00001540| 6c 6e 65 72 61 62 6c 65 | 20 74 6f 20 74 68 65 0a |lnerable| to the.|
|00001550| 66 69 72 73 74 20 70 72 | 6f 62 6c 65 6d 2c 20 61 |first pr|oblem, a|
|00001560| 6e 64 20 64 6f 20 6e 6f | 74 20 73 75 70 70 6f 72 |nd do no|t suppor|
|00001570| 74 20 61 6e 20 58 20 73 | 65 72 76 65 72 2c 20 6d |t an X s|erver, m|
|00001580| 61 6b 69 6e 67 20 74 68 | 65 6d 20 6e 6f 74 0a 76 |aking th|em not.v|
|00001590| 75 6c 6e 65 72 61 62 6c | 65 20 74 6f 20 74 68 65 |ulnerabl|e to the|
|000015a0| 20 73 65 63 6f 6e 64 20 | 70 72 6f 62 6c 65 6d 2e | second |problem.|
|000015b0| 0a 0a 0a 47 53 53 43 20 | 28 66 6f 72 6d 65 72 6c |...GSSC |(formerl|
|000015c0| 79 20 53 6f 6c 62 6f 75 | 72 6e 65 29 0a 0a 48 61 |y Solbou|rne)..Ha|
|000015d0| 73 20 63 6f 6e 63 6c 75 | 64 65 64 20 74 68 65 79 |s conclu|ded they|
|000015e0| 20 61 72 65 20 6e 6f 74 | 20 76 75 6c 6e 65 72 61 | are not| vulnera|
|000015f0| 62 6c 65 2e 0a 0a 0a 48 | 65 77 6c 65 74 74 2d 50 |ble....H|ewlett-P|
|00001600| 61 63 6b 61 72 64 0a 0a | 41 6c 6c 20 76 65 72 73 |ackard..|All vers|
|00001610| 69 6f 6e 73 20 6f 66 20 | 58 20 6f 6e 20 48 50 2d |ions of |X on HP-|
|00001620| 55 58 20 39 2e 78 20 61 | 6e 64 20 31 30 2e 78 20 |UX 9.x a|nd 10.x |
|00001630| 28 62 61 73 65 64 20 6f | 6e 20 58 31 31 52 35 29 |(based o|n X11R5)|
|00001640| 20 64 6f 20 6e 6f 74 0a | 68 61 76 65 20 74 68 65 | do not.|have the|
|00001650| 20 66 69 72 73 74 20 76 | 75 6c 6e 65 72 61 62 69 | first v|ulnerabi|
|00001660| 6c 69 74 79 2e 0a 0a 0a | 58 20 43 6f 6e 73 6f 72 |lity....|X Consor|
|00001670| 74 69 75 6d 0a 0a 28 53 | 61 6d 70 6c 65 20 69 6d |tium..(S|ample im|
|00001680| 70 6c 65 6d 65 6e 74 61 | 74 69 6f 6e 20 6f 66 20 |plementa|tion of |
|00001690| 58 2e 29 20 20 59 6f 75 | 20 63 61 6e 20 70 61 74 |X.)  You| can pat|
|000016a0| 63 68 20 58 31 31 52 36 | 20 62 79 20 61 70 70 6c |ch X11R6| by appl|
|000016b0| 79 69 6e 67 20 61 6c 6c | 0a 70 75 62 6c 69 63 20 |ying all|.public |
|000016c0| 70 61 74 63 68 65 73 20 | 75 70 20 74 6f 20 61 6e |patches |up to an|
|000016d0| 64 20 69 6e 63 6c 75 64 | 69 6e 67 20 66 69 78 2d |d includ|ing fix-|
|000016e0| 31 33 2e 20 20 50 61 74 | 63 68 65 73 20 61 72 65 |13.  Pat|ches are|
|000016f0| 20 61 76 61 69 6c 61 62 | 6c 65 0a 76 69 61 20 46 | availab|le.via F|
|00001700| 54 50 20 66 72 6f 6d 20 | 66 74 70 2e 78 2e 6f 72 |TP from |ftp.x.or|
|00001710| 67 20 69 6e 20 2f 70 75 | 62 2f 52 36 2f 66 69 78 |g in /pu|b/R6/fix|
|00001720| 65 73 2f 20 61 6e 64 20 | 66 72 6f 6d 20 6d 69 72 |es/ and |from mir|
|00001730| 72 6f 72 69 6e 67 20 73 | 69 74 65 73 2e 0a 0a 59 |roring s|ites...Y|
|00001740| 6f 75 20 63 61 6e 20 63 | 68 65 63 6b 20 74 68 61 |ou can c|heck tha|
|00001750| 74 20 74 68 65 20 58 20 | 73 65 72 76 65 72 20 68 |t the X |server h|
|00001760| 61 73 20 66 69 78 2d 31 | 33 20 69 6e 73 74 61 6c |as fix-1|3 instal|
|00001770| 6c 65 64 20 62 79 20 76 | 65 72 69 66 79 69 6e 67 |led by v|erifying|
|00001780| 0a 74 68 61 74 20 74 68 | 65 20 73 65 72 76 65 72 |.that th|e server|
|00001790| 20 68 61 73 20 61 20 76 | 65 6e 64 6f 72 20 72 65 | has a v|endor re|
|000017a0| 6c 65 61 73 65 20 6e 75 | 6d 62 65 72 20 6f 66 20 |lease nu|mber of |
|000017b0| 36 30 30 31 20 6f 72 20 | 68 69 67 68 65 72 2e 0a |6001 or |higher..|
|000017c0| 0a 47 65 6e 65 72 61 6c | 20 71 75 65 73 74 69 6f |.General| questio|
|000017d0| 6e 73 20 61 62 6f 75 74 | 20 74 68 65 20 58 20 57 |ns about| the X W|
|000017e0| 69 6e 64 6f 77 20 53 79 | 73 74 65 6d 20 63 61 6e |indow Sy|stem can|
|000017f0| 20 62 65 20 61 73 6b 65 | 64 20 6f 6e 20 74 68 65 | be aske|d on the|
|00001800| 0a 78 70 65 72 74 20 6d | 61 69 6c 69 6e 67 20 6c |.xpert m|ailing l|
|00001810| 69 73 74 20 68 6f 73 74 | 65 64 20 61 74 20 78 2e |ist host|ed at x.|
|00001820| 6f 72 67 2e 20 20 53 65 | 6e 64 20 61 20 22 73 75 |org.  Se|nd a "su|
|00001830| 62 73 63 72 69 62 65 22 | 20 6d 65 73 73 61 67 65 |bscribe"| message|
|00001840| 20 74 6f 0a 78 70 65 72 | 74 2d 72 65 71 75 65 73 | to.xper|t-reques|
|00001850| 74 40 78 2e 6f 72 67 20 | 74 6f 20 73 75 62 73 63 |t@x.org |to subsc|
|00001860| 72 69 62 65 2e 20 20 54 | 68 69 73 20 6c 69 73 74 |ribe.  T|his list|
|00001870| 20 69 73 20 67 61 74 65 | 77 61 79 65 64 20 77 69 | is gate|wayed wi|
|00001880| 74 68 0a 74 68 65 20 63 | 6f 6d 70 2e 77 69 6e 64 |th.the c|omp.wind|
|00001890| 6f 77 73 2e 78 20 6e 65 | 77 73 67 72 6f 75 70 2e |ows.x ne|wsgroup.|
|000018a0| 20 20 54 68 65 20 46 41 | 51 20 66 6f 72 20 74 68 |  The FA|Q for th|
|000018b0| 69 73 20 6e 65 77 73 67 | 72 6f 75 70 20 69 73 0a |is newsg|roup is.|
|000018c0| 61 76 61 69 6c 61 62 6c | 65 20 66 72 6f 6d 20 3c |availabl|e from <|
|000018d0| 66 74 70 3a 2f 2f 66 74 | 70 2e 78 2e 6f 72 67 2f |ftp://ft|p.x.org/|
|000018e0| 63 6f 6e 74 72 69 62 2f | 66 61 71 73 2f 46 41 51 |contrib/|faqs/FAQ|
|000018f0| 2e 5a 3e 20 61 6e 64 20 | 6f 74 68 65 72 0a 6c 6f |.Z> and |other.lo|
|00001900| 63 61 74 69 6f 6e 73 2e | 20 20 3c 68 74 74 70 3a |cations.|  <http:|
|00001910| 2f 2f 77 77 77 2e 78 2e | 6f 72 67 2f 63 6f 6e 73 |//www.x.|org/cons|
|00001920| 6f 72 74 69 75 6d 2f 6e | 65 77 73 5f 61 6e 64 5f |ortium/n|ews_and_|
|00001930| 6d 61 69 6c 2e 68 74 6d | 6c 3e 0a 64 65 73 63 72 |mail.htm|l>.descr|
|00001940| 69 62 65 73 20 6f 74 68 | 65 72 20 6e 65 77 73 67 |ibes oth|er newsg|
|00001950| 72 6f 75 70 73 20 61 6e | 64 20 6d 61 69 6c 69 6e |roups an|d mailin|
|00001960| 67 20 6c 69 73 74 73 20 | 66 6f 72 20 74 68 65 20 |g lists |for the |
|00001970| 64 69 73 63 75 73 73 69 | 6f 6e 0a 6f 66 20 69 73 |discussi|on.of is|
|00001980| 73 75 65 73 20 72 65 6c | 61 74 65 64 20 74 6f 20 |sues rel|ated to |
|00001990| 74 68 65 20 58 20 57 69 | 6e 64 6f 77 20 53 79 73 |the X Wi|ndow Sys|
|000019a0| 74 65 6d 2e 0a 0a 42 75 | 67 73 20 65 6e 63 6f 75 |tem...Bu|gs encou|
|000019b0| 6e 74 65 64 20 69 6e 20 | 58 20 43 6f 6e 73 6f 72 |nted in |X Consor|
|000019c0| 74 69 75 6d 20 63 6f 64 | 65 20 63 61 6e 20 62 65 |tium cod|e can be|
|000019d0| 20 72 65 70 6f 72 74 65 | 64 20 74 6f 0a 78 62 75 | reporte|d to.xbu|
|000019e0| 67 73 40 78 2e 6f 72 67 | 20 75 73 69 6e 67 20 74 |gs@x.org| using t|
|000019f0| 68 65 20 66 6f 72 6d 61 | 74 20 69 6e 20 78 63 2f |he forma|t in xc/|
|00001a00| 62 75 67 2d 72 65 70 6f | 72 74 2e 20 20 50 6c 65 |bug-repo|rt.  Ple|
|00001a10| 61 73 65 20 73 65 65 20 | 74 68 65 0a 58 31 31 52 |ase see |the.X11R|
|00001a20| 36 20 52 65 6c 65 61 73 | 65 20 4e 6f 74 65 73 20 |6 Releas|e Notes |
|00001a30| 66 6f 72 20 61 64 64 69 | 74 69 6f 6e 61 6c 20 64 |for addi|tional d|
|00001a40| 65 74 61 69 6c 73 2e 0a | 0a 0a 58 46 72 65 65 38 |etails..|..XFree8|
|00001a50| 36 20 50 72 6f 6a 65 63 | 74 0a 0a 54 68 65 20 58 |6 Projec|t..The X|
|00001a60| 46 72 65 65 38 36 20 50 | 72 6f 6a 65 63 74 2c 20 |Free86 P|roject, |
|00001a70| 49 6e 63 20 68 61 73 20 | 70 61 74 63 68 65 64 20 |Inc has |patched |
|00001a80| 62 69 6e 61 72 69 65 73 | 20 66 6f 72 20 58 46 72 |binaries| for XFr|
|00001a90| 65 65 38 36 20 76 65 72 | 73 69 6f 6e 20 33 2e 31 |ee86 ver|sion 3.1|
|00001aa0| 2e 32 0a 72 75 6e 6e 69 | 6e 67 20 6f 6e 20 46 72 |.2.runni|ng on Fr|
|00001ab0| 65 65 42 53 44 20 31 2e | 31 2e 35 2c 20 46 72 65 |eeBSD 1.|1.5, Fre|
|00001ac0| 65 42 53 44 20 32 2e 30 | 2e 35 2c 20 49 53 43 2c |eBSD 2.0|.5, ISC,|
|00001ad0| 20 4e 65 74 42 53 44 20 | 61 6e 64 20 53 56 52 34 | NetBSD |and SVR4|
|00001ae0| 2e 20 20 54 68 65 79 0a | 61 72 65 20 61 76 61 69 |.  They.|are avai|
|00001af0| 6c 61 62 6c 65 20 66 72 | 6f 6d 20 66 74 70 3a 2f |lable fr|om ftp:/|
|00001b00| 2f 66 74 70 2e 78 66 72 | 65 65 38 36 2e 6f 72 67 |/ftp.xfr|ee86.org|
|00001b10| 2f 70 75 62 2f 58 46 72 | 65 65 38 36 2f 33 2e 31 |/pub/XFr|ee86/3.1|
|00001b20| 2e 32 2f 62 69 6e 61 72 | 69 65 73 2f 2e 0a 54 68 |.2/binar|ies/..Th|
|00001b30| 65 20 66 69 6c 65 73 20 | 61 72 65 3a 0a 0a 20 20 |e files |are:..  |
|00001b40| 46 72 65 65 42 53 44 2d | 31 2e 31 2e 35 2f 58 33 |FreeBSD-|1.1.5/X3|
|00001b50| 31 32 53 78 64 6d 2e 74 | 67 7a 0a 20 20 46 72 65 |12Sxdm.t|gz.  Fre|
|00001b60| 65 42 53 44 2d 32 2e 30 | 2e 35 2f 58 33 31 32 53 |eBSD-2.0|.5/X312S|
|00001b70| 78 64 6d 2e 74 67 7a 0a | 20 20 49 53 43 2f 58 33 |xdm.tgz.|  ISC/X3|
|00001b80| 31 32 53 78 64 6d 2e 74 | 67 7a 0a 20 20 4e 65 74 |12Sxdm.t|gz.  Net|
|00001b90| 42 53 44 2f 58 33 31 32 | 53 78 64 6d 2e 74 67 7a |BSD/X312|Sxdm.tgz|
|00001ba0| 0a 20 20 53 56 52 34 2f | 58 33 31 32 53 78 64 6d |.  SVR4/|X312Sxdm|
|00001bb0| 2e 74 67 7a 0a 0a 54 68 | 65 20 4d 44 35 20 63 68 |.tgz..Th|e MD5 ch|
|00001bc0| 65 63 6b 73 75 6d 73 20 | 61 72 65 3a 0a 0a 20 20 |ecksums |are:..  |
|00001bd0| 4d 44 35 20 28 46 72 65 | 65 42 53 44 2d 31 2e 31 |MD5 (Fre|eBSD-1.1|
|00001be0| 2e 35 2f 58 33 31 32 53 | 78 64 6d 2e 74 67 7a 29 |.5/X312S|xdm.tgz)|
|00001bf0| 20 3d 20 34 33 31 36 36 | 31 30 39 63 38 38 66 63 | = 43166|109c88fc|
|00001c00| 64 36 32 33 64 32 37 64 | 65 31 66 61 39 30 65 38 |d623d27d|e1fa90e8|
|00001c10| 66 35 62 0a 20 20 4d 44 | 35 20 28 46 72 65 65 42 |f5b.  MD|5 (FreeB|
|00001c20| 53 44 2d 32 2e 30 2e 35 | 2f 58 33 31 32 53 78 64 |SD-2.0.5|/X312Sxd|
|00001c30| 6d 2e 74 67 7a 29 20 3d | 20 33 33 31 34 61 36 32 |m.tgz) =| 3314a62|
|00001c40| 33 62 32 63 33 31 61 39 | 31 33 30 34 34 35 65 39 |3b2c31a9|130445e9|
|00001c50| 32 33 37 66 66 36 35 66 | 39 0a 20 20 4d 44 35 20 |237ff65f|9.  MD5 |
|00001c60| 28 49 53 43 2f 58 33 31 | 32 53 78 64 6d 2e 74 67 |(ISC/X31|2Sxdm.tg|
|00001c70| 7a 29 20 3d 20 65 34 65 | 31 36 66 63 35 66 34 64 |z) = e4e|16fc5f4d|
|00001c80| 30 36 61 64 34 35 35 65 | 35 37 32 61 32 65 31 65 |06ad455e|572a2e1e|
|00001c90| 62 30 65 62 35 0a 20 20 | 4d 44 35 20 28 4e 65 74 |b0eb5.  |MD5 (Net|
|00001ca0| 42 53 44 2f 58 33 31 32 | 53 78 64 6d 2e 74 67 7a |BSD/X312|Sxdm.tgz|
|00001cb0| 29 20 3d 20 30 62 63 37 | 34 63 62 65 65 30 32 31 |) = 0bc7|4cbee021|
|00001cc0| 34 33 36 36 61 63 31 35 | 36 35 38 62 66 35 34 33 |4366ac15|658bf543|
|00001cd0| 36 38 35 33 0a 20 20 4d | 44 35 20 28 53 56 52 34 |6853.  M|D5 (SVR4|
|00001ce0| 2f 58 33 31 32 53 78 64 | 6d 2e 74 67 7a 29 20 3d |/X312Sxd|m.tgz) =|
|00001cf0| 20 62 66 35 64 66 65 61 | 32 61 38 36 63 64 66 39 | bf5dfea|2a86cdf9|
|00001d00| 32 36 32 31 34 32 31 65 | 33 66 36 38 61 66 32 30 |2621421e|3f68af20|
|00001d10| 33 0a 0a 49 6e 73 74 61 | 6c 6c 61 74 69 6f 6e 20 |3..Insta|llation |
|00001d20| 69 6e 73 74 72 75 63 74 | 69 6f 6e 73 20 28 61 73 |instruct|ions (as|
|00001d30| 73 75 6d 69 6e 67 20 58 | 33 31 32 78 64 6d 2e 74 |suming X|312xdm.t|
|00001d40| 67 7a 20 69 73 20 69 6e | 20 2f 74 6d 70 29 3a 0a |gz is in| /tmp):.|
|00001d50| 0a 4b 69 6c 6c 20 61 6e | 79 20 78 64 6d 20 70 72 |.Kill an|y xdm pr|
|00001d60| 6f 63 65 73 73 65 73 20 | 74 68 61 74 20 61 72 65 |ocesses |that are|
|00001d70| 20 72 75 6e 6e 69 6e 67 | 2c 20 74 68 65 6e 3a 0a | running|, then:.|
|00001d80| 0a 20 20 46 6f 72 20 46 | 72 65 65 42 53 44 20 31 |.  For F|reeBSD 1|
|00001d90| 2e 31 2e 35 20 61 6e 64 | 20 46 72 65 65 42 53 44 |.1.5 and| FreeBSD|
|00001da0| 20 32 2e 30 2e 35 3a 0a | 0a 20 20 20 20 63 64 20 | 2.0.5:.|.    cd |
|00001db0| 2f 75 73 72 0a 20 20 20 | 20 6d 76 20 58 31 31 52 |/usr.   | mv X11R|
|00001dc0| 36 2f 62 69 6e 2f 78 64 | 6d 20 58 31 31 52 36 2f |6/bin/xd|m X11R6/|
|00001dd0| 62 69 6e 2f 78 64 6d 2d | 33 2e 31 2e 32 0a 20 20 |bin/xdm-|3.1.2.  |
|00001de0| 20 20 63 68 6d 6f 64 20 | 30 35 30 30 20 58 31 31 |  chmod |0500 X11|
|00001df0| 52 36 2f 62 69 6e 2f 78 | 64 6d 2d 33 2e 31 2e 32 |R6/bin/x|dm-3.1.2|
|00001e00| 0a 20 20 20 20 67 7a 69 | 70 20 2d 64 20 3c 20 2f |.    gzi|p -d < /|
|00001e10| 74 6d 70 2f 58 33 31 32 | 78 64 6d 2e 74 67 7a 20 |tmp/X312|xdm.tgz |
|00001e20| 7c 20 74 61 72 20 76 78 | 66 20 2d 0a 0a 20 20 46 || tar vx|f -..  F|
|00001e30| 6f 72 20 4e 65 74 42 53 | 44 3a 0a 0a 20 20 20 20 |or NetBS|D:..    |
|00001e40| 6d 76 20 2f 75 73 72 2f | 58 31 31 52 36 2f 62 69 |mv /usr/|X11R6/bi|
|00001e50| 6e 2f 78 64 6d 20 2f 75 | 73 72 2f 58 31 31 52 36 |n/xdm /u|sr/X11R6|
|00001e60| 2f 62 69 6e 2f 78 64 6d | 2d 33 2e 31 2e 32 0a 20 |/bin/xdm|-3.1.2. |
|00001e70| 20 20 20 63 68 6d 6f 64 | 20 30 35 30 30 20 2f 75 |   chmod| 0500 /u|
|00001e80| 73 72 2f 58 31 31 52 36 | 2f 62 69 6e 2f 78 64 6d |sr/X11R6|/bin/xdm|
|00001e90| 2d 33 2e 31 2e 32 0a 20 | 20 20 20 70 6b 67 5f 61 |-3.1.2. |   pkg_a|
|00001ea0| 64 64 20 2f 74 6d 70 2f | 58 33 31 32 53 78 64 6d |dd /tmp/|X312Sxdm|
|00001eb0| 2e 74 67 7a 0a 0a 20 20 | 46 6f 72 20 49 53 43 20 |.tgz..  |For ISC |
|00001ec0| 61 6e 64 20 53 56 52 34 | 3a 0a 0a 20 20 20 20 63 |and SVR4|:..    c|
|00001ed0| 64 20 2f 75 73 72 2f 58 | 31 31 52 36 0a 20 20 20 |d /usr/X|11R6.   |
|00001ee0| 20 6d 76 20 62 69 6e 2f | 78 64 6d 20 62 69 6e 2f | mv bin/|xdm bin/|
|00001ef0| 78 64 6d 2d 33 2e 31 2e | 32 0a 20 20 20 20 63 68 |xdm-3.1.|2.    ch|
|00001f00| 6d 6f 64 20 30 35 30 30 | 20 62 69 6e 2f 78 64 6d |mod 0500| bin/xdm|
|00001f10| 2d 33 2e 31 2e 32 0a 20 | 20 20 20 67 7a 69 70 20 |-3.1.2. |   gzip |
|00001f20| 2d 64 20 3c 20 2f 74 6d | 70 2f 58 33 31 32 78 64 |-d < /tm|p/X312xd|
|00001f30| 6d 2e 74 67 7a 20 7c 20 | 74 61 72 20 76 78 66 20 |m.tgz | |tar vxf |
|00001f40| 2d 0a 0a 0a 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |-...====|========|
|00001f50| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 46 4f 52 |========|=====FOR|
|00001f60| 57 41 52 44 45 44 20 54 | 45 58 54 20 45 4e 44 53 |WARDED T|EXT ENDS|
|00001f70| 20 48 45 52 45 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d | HERE===|========|
|00001f80| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00001f90| 3d 3d 0a 0a 0a 43 45 52 | 54 20 70 75 62 6c 69 63 |==...CER|T public|
|00001fa0| 61 74 69 6f 6e 73 2c 20 | 69 6e 66 6f 72 6d 61 74 |ations, |informat|
|00001fb0| 69 6f 6e 20 61 62 6f 75 | 74 20 46 49 52 53 54 20 |ion abou|t FIRST |
|00001fc0| 72 65 70 72 65 73 65 6e | 74 61 74 69 76 65 73 2c |represen|tatives,|
|00001fd0| 20 61 6e 64 0a 6f 74 68 | 65 72 20 69 6e 66 6f 72 | and.oth|er infor|
|00001fe0| 6d 61 74 69 6f 6e 20 72 | 65 6c 61 74 65 64 20 74 |mation r|elated t|
|00001ff0| 6f 20 63 6f 6d 70 75 74 | 65 72 20 73 65 63 75 72 |o comput|er secur|
|00002000| 69 74 79 20 61 72 65 20 | 61 76 61 69 6c 61 62 6c |ity are |availabl|
|00002010| 65 20 66 6f 72 20 61 6e | 6f 6e 79 6d 6f 75 73 20 |e for an|onymous |
|00002020| 0a 46 54 50 20 66 72 6f | 6d 20 69 6e 66 6f 2e 63 |.FTP fro|m info.c|
|00002030| 65 72 74 2e 6f 72 67 2e | 20 0a 0a 43 45 52 54 20 |ert.org.| ..CERT |
|00002040| 61 64 76 69 73 6f 72 69 | 65 73 20 61 6e 64 20 62 |advisori|es and b|
|00002050| 75 6c 6c 65 74 69 6e 73 | 20 61 72 65 20 61 6c 73 |ulletins| are als|
|00002060| 6f 20 70 6f 73 74 65 64 | 20 6f 6e 20 74 68 65 20 |o posted| on the |
|00002070| 55 53 45 4e 45 54 20 6e | 65 77 73 67 72 6f 75 70 |USENET n|ewsgroup|
|00002080| 0a 63 6f 6d 70 2e 73 65 | 63 75 72 69 74 79 2e 61 |.comp.se|curity.a|
|00002090| 6e 6e 6f 75 6e 63 65 2e | 20 49 66 20 79 6f 75 20 |nnounce.| If you |
|000020a0| 77 6f 75 6c 64 20 6c 69 | 6b 65 20 74 6f 20 68 61 |would li|ke to ha|
|000020b0| 76 65 20 66 75 74 75 72 | 65 20 61 64 76 69 73 6f |ve futur|e adviso|
|000020c0| 72 69 65 73 20 61 6e 64 | 0a 62 75 6c 6c 65 74 69 |ries and|.bulleti|
|000020d0| 6e 73 20 6d 61 69 6c 65 | 64 20 74 6f 20 79 6f 75 |ns maile|d to you|
|000020e0| 20 6f 72 20 74 6f 20 61 | 20 6d 61 69 6c 20 65 78 | or to a| mail ex|
|000020f0| 70 6c 6f 64 65 72 20 61 | 74 20 79 6f 75 72 20 73 |ploder a|t your s|
|00002100| 69 74 65 2c 20 70 6c 65 | 61 73 65 20 73 65 6e 64 |ite, ple|ase send|
|00002110| 20 6d 61 69 6c 0a 74 6f | 20 63 65 72 74 2d 61 64 | mail.to| cert-ad|
|00002120| 76 69 73 6f 72 79 2d 72 | 65 71 75 65 73 74 40 63 |visory-r|equest@c|
|00002130| 65 72 74 2e 6f 72 67 2e | 0a 0a 49 66 20 79 6f 75 |ert.org.|..If you|
|00002140| 20 77 69 73 68 20 74 6f | 20 73 65 6e 64 20 73 65 | wish to| send se|
|00002150| 6e 73 69 74 69 76 65 20 | 69 6e 63 69 64 65 6e 74 |nsitive |incident|
|00002160| 20 6f 72 20 76 75 6c 6e | 65 72 61 62 69 6c 69 74 | or vuln|erabilit|
|00002170| 79 20 69 6e 66 6f 72 6d | 61 74 69 6f 6e 20 74 6f |y inform|ation to|
|00002180| 0a 43 45 52 54 20 73 74 | 61 66 66 20 62 79 20 65 |.CERT st|aff by e|
|00002190| 6c 65 63 74 72 6f 6e 69 | 63 20 6d 61 69 6c 2c 20 |lectroni|c mail, |
|000021a0| 77 65 20 73 74 72 6f 6e | 67 6c 79 20 61 64 76 69 |we stron|gly advi|
|000021b0| 73 65 20 74 68 61 74 20 | 74 68 65 20 65 2d 6d 61 |se that |the e-ma|
|000021c0| 69 6c 20 62 65 0a 65 6e | 63 72 79 70 74 65 64 2e |il be.en|crypted.|
|000021d0| 20 20 54 68 65 20 43 45 | 52 54 20 43 6f 6f 72 64 |  The CE|RT Coord|
|000021e0| 69 6e 61 74 69 6f 6e 20 | 43 65 6e 74 65 72 20 63 |ination |Center c|
|000021f0| 61 6e 20 73 75 70 70 6f | 72 74 20 61 20 73 68 61 |an suppo|rt a sha|
|00002200| 72 65 64 20 44 45 53 20 | 6b 65 79 2c 20 50 47 50 |red DES |key, PGP|
|00002210| 0a 28 70 75 62 6c 69 63 | 20 6b 65 79 20 61 76 61 |.(public| key ava|
|00002220| 69 6c 61 62 6c 65 20 76 | 69 61 20 61 6e 6f 6e 79 |ilable v|ia anony|
|00002230| 6d 6f 75 73 20 46 54 50 | 20 6f 6e 20 69 6e 66 6f |mous FTP| on info|
|00002240| 2e 63 65 72 74 2e 6f 72 | 67 29 2c 20 6f 72 20 50 |.cert.or|g), or P|
|00002250| 45 4d 20 28 63 6f 6e 74 | 61 63 74 0a 43 45 52 54 |EM (cont|act.CERT|
|00002260| 20 73 74 61 66 66 20 66 | 6f 72 20 64 65 74 61 69 | staff f|or detai|
|00002270| 6c 73 29 2e 0a 0a 49 6e | 74 65 72 6e 65 74 20 65 |ls)...In|ternet e|
|00002280| 6d 61 69 6c 3a 20 63 65 | 72 74 40 63 65 72 74 2e |mail: ce|rt@cert.|
|00002290| 6f 72 67 0a 54 65 6c 65 | 70 68 6f 6e 65 3a 20 2b |org.Tele|phone: +|
|000022a0| 31 20 34 31 32 2d 32 36 | 38 2d 37 30 39 30 20 28 |1 412-26|8-7090 (|
|000022b0| 32 34 2d 68 6f 75 72 20 | 68 6f 74 6c 69 6e 65 29 |24-hour |hotline)|
|000022c0| 0a 20 20 20 20 20 20 20 | 20 20 20 20 43 45 52 54 |.       |    CERT|
|000022d0| 20 70 65 72 73 6f 6e 6e | 65 6c 20 61 6e 73 77 65 | personn|el answe|
|000022e0| 72 20 38 3a 33 30 20 61 | 2e 6d 2e 2d 35 3a 30 30 |r 8:30 a|.m.-5:00|
|000022f0| 20 70 2e 6d 2e 20 45 53 | 54 28 47 4d 54 2d 35 29 | p.m. ES|T(GMT-5)|
|00002300| 2f 45 44 54 28 47 4d 54 | 2d 34 29 2c 0a 20 20 20 |/EDT(GMT|-4),.   |
|00002310| 20 20 20 20 20 20 20 20 | 61 6e 64 20 61 72 65 20 |        |and are |
|00002320| 6f 6e 20 63 61 6c 6c 20 | 66 6f 72 20 65 6d 65 72 |on call |for emer|
|00002330| 67 65 6e 63 69 65 73 20 | 64 75 72 69 6e 67 20 6f |gencies |during o|
|00002340| 74 68 65 72 20 68 6f 75 | 72 73 2e 0a 46 61 78 3a |ther hou|rs..Fax:|
|00002350| 20 2b 31 20 34 31 32 2d | 32 36 38 2d 36 39 38 39 | +1 412-|268-6989|
|00002360| 0a 0a 43 45 52 54 20 43 | 6f 6f 72 64 69 6e 61 74 |..CERT C|oordinat|
|00002370| 69 6f 6e 20 43 65 6e 74 | 65 72 0a 53 6f 66 74 77 |ion Cent|er.Softw|
|00002380| 61 72 65 20 45 6e 67 69 | 6e 65 65 72 69 6e 67 20 |are Engi|neering |
|00002390| 49 6e 73 74 69 74 75 74 | 65 0a 43 61 72 6e 65 67 |Institut|e.Carneg|
|000023a0| 69 65 20 4d 65 6c 6c 6f | 6e 20 55 6e 69 76 65 72 |ie Mello|n Univer|
|000023b0| 73 69 74 79 0a 50 69 74 | 74 73 62 75 72 67 68 2c |sity.Pit|tsburgh,|
|000023c0| 20 50 41 20 31 35 32 31 | 33 2d 33 38 39 30 0a 55 | PA 1521|3-3890.U|
|000023d0| 53 41 0a 0a 0a 0a 0a 43 | 45 52 54 20 69 73 20 61 |SA.....C|ERT is a|
|000023e0| 20 73 65 72 76 69 63 65 | 20 6d 61 72 6b 20 6f 66 | service| mark of|
|000023f0| 20 43 61 72 6e 65 67 69 | 65 20 4d 65 6c 6c 6f 6e | Carnegi|e Mellon|
|00002400| 20 55 6e 69 76 65 72 73 | 69 74 79 2e 0a 0a       | Univers|ity...  |
+--------+-------------------------+-------------------------+--------+--------+