December 2000 - openSUSE Security - openSUSE Mailing Lists

RE: [suse-security] Firewall/Virusscanner Conclusion
by ralf.vroomen＠itplus.nl 05 Dec '00

05 Dec '00

>errm... AVP is definitely NOT free. I don't think you read the webpage very >well :) Ooops... ;) never saw that one. Deleting AVP while I'm typing this :) >Neither is InoculateIT. Just cause you can download it doesn't mean that >it's free. The way I read their web site, for personal use it is. >You can dl McAfee AV for Linux also, but you'll find them calling you after >a few months >of updates asking you to pay for a licence.. I hate McAfee! >After looking at the current FAQ for Amavis (http://www.amavis.org/FAQ.txt), > I see that it still has the same limitation that made me use MFilter. >(I used to use amavis on approximately 20 servers until I found MFilter) >but pls correct me if the FAQ is out of date, as I know there are some amavis >developers on the list. >The problem is that it can't seamlessly scan ALL mail relayed through the >server. >That being all inbound and outbound mail regardless if it's for local >delivery or not. Whell, the concept should be considered as *experimental* but this is from the README.sendmail: [..snip..] Scanning incoming/outgoing and relayed mail ------------------------------------------- The concept for scanning incoming/outgoing and relayed mail is different from the concept described in the AMaViS documentation. We use two different setups (.cf files) for sendmail, one is the original configuration, the second has a different Queue-Directory, another status file and most importand a changed Rule Set 0 and the Mailer Definition AMaViS, so that AMaViS is always called first. If no virus is detect, then we deliver the mail again to sendmail but we advise sendmail to use the original configuration. [..snip..] >If you have a configuration where you need this (I have 100's of clients >who do..) >consider carefully b4 you use amavis as it will cause you alot of work. My main concern is stopping incoming virus mails. Outgoing is optional and _can_ be done with Amavis. And if the receiver has a incoming virus scanner there would be no need for an outgoing scanner. >MFilter has the advantage of being a completely separate process to >Sendmail/SMTPD >and therefore is very flexible..... Could jou supply me with an URL of this MFilter? Thanx! Ralf Vroomen

1 0

Re: [suse-security] Firewall/Virusscanner Conclusion
by Nix 05 Dec '00

05 Dec '00

errm... AVP is definitely NOT free. I don't think you read the webpage very well :) Neither is InoculateIT. Just cause you can download it doesn't mean that it's free. You can dl McAfee AV for Linux also, but you'll find them calling you after a few months of updates asking you to pay for a licence.. The last line on that avp page you link says: "Contact sales(a)avp.ch for pricing and availability information" After looking at the current FAQ for Amavis (http://www.amavis.org/FAQ.txt), I see that it still has the same limitation that made me use MFilter. (I used to use amavis on approximately 20 servers until I found MFilter) but pls correct me if the FAQ is out of date, as I know there are some amavis developers on the list. The problem is that it can't seamlessly scan ALL mail relayed through the server. That being all inbound and outbound mail regardless if it's for local delivery or not. This is a BIG limitation in the design of Amavis and needs to be rectified b4 it will be able to act as a replacement for MIMESweeper or VirusWall (apporpriate tm's) If you have a configuration where you need this (I have 100's of clients who do..) consider carefully b4 you use amavis as it will cause you alot of work. MFilter has the advantage of being a completely separate process to Sendmail/SMTPD and therefore is very flexible..... Hope this info is useful to someone... just my 2c worth... Cheers Nix At 09:04 AM 5/12/2000 +0100, ralf.vroomen(a)itplus.nl wrote: >First of all, SORRY I SEND HTML MAIL!!! > >Well, thank you all for your replies. I (really) looked at al the stuf you >guys posted and I now have email virus scanner scanning it's way trough my >mail server ;) > >For all the people who don't have it and want it, I got the best, simplest >and free results from Amavis (www.amavis.org) running on SuSE7 with >sendmail 8.10.2 (www.sendmail.org). As for virus scanners I found CAI >inoculateIT (ftp.cai.com/pub/getbbs/) and AVP >(<http://www.avp.ch/E/dlinux.htm>http://www.avp.ch/E/dlinux.htm) easy to >use and FREE (a lot of'm are not free). > >Thanx you all! > >Ralf Vroomen

2 1

SuSE 6.2/6.3 and NSCD
by Joerg Henner 05 Dec '00

05 Dec '00

hi, well i know maybe an OT-Question: is it known that NSCD within an 6.2/6.3 System causes "Segfaults" while doing "ls" in the directory-structure ? All available updates doesnt fix this at one of our Customers - But switching NSCD "OFF", than no problems occur... Any Hints ? Greetings, Joerg Henner. -- LinuxHaus Stuttgart | Tel.: +49 (7 11) 2 85 19 05 J. Henner & A. Reyer, Datentechnik GbR | D2: +49 (1 72) 7 35 31 09 | Fax: +49 (7 11) 5 78 06 92 Linux, Netzwerke, Consulting & Support | http://lihas.de

1 0

Firewall/Virusscanner Conclusion
by ralf.vroomen＠itplus.nl 05 Dec '00

05 Dec '00

First of all, SORRY I SEND HTML MAIL!!! Well, thank you all for your replies. I (really) looked at al the stuf you guys posted and I now have email virus scanner scanning it's way trough my mail server ;) For all the people who don't have it and want it, I got the best, simplest and free results from Amavis (www.amavis.org) running on SuSE7 with sendmail 8.10.2 (www.sendmail.org). As for virus scanners I found CAI inoculateIT (ftp.cai.com/pub/getbbs/) and AVP (http://www.avp.ch/E/dlinux.htm) easy to use and FREE (a lot of'm are not free). Thanx you all! Ralf Vroomen

2 1

security and quality of qmail and relatives
by suse＠diplan.de 05 Dec '00

05 Dec '00

Hi! I'd like to ask you experts about a short and non flaming statement about the qmail MTA and related tools of Mr. Bernstein. I am looking for a secure and more transparent replacement for sendmail. Why isnt SUSE using the qmail system? Thank you for a clarifying statement. Rainer --

4 4

Firewall/Virusscanner
by ralf.vroomen＠itplus.nl 05 Dec '00

05 Dec '00

Hello world. A little question: I'm looking for a decent virusscanner to install on my SuSE 6.2 firewall. While all good firewall programs defend you against hackers, I still haven't found a decent virusscanner to defend all workstations behind the firewall. Okay, you could install virusscanners on all worstation, but my goal is to catch the virus and those damn pokémon BEFORE they can reach the workstations. Anybody have some suggestions? A good scanner scanning incoming mail on my SuSE7.0 + Sendmail 8.10.2 would be a really nice too :) TIA. Ralf Vroomen Engineer I.T. Plus. Tel: 0413-382401 Fax: 0413-382136 Mail: ralf.vroomen(a)itplus.nl

7 9

port forwarding/masquerading question
by Samartha 05 Dec '00

05 Dec '00

Now I got one too: Scenario: inner LAN ----- firewall ----- internet $INET-IP $LAN-IP | | | $DMZ-IP DMZ w/ web & mail server with masq private IP's going from inner LAN to DMZ/web server using internet IP addresses (URL's going thru DNS) hangs. Using the $DMZ-IP from inner LAN connects fine ( using ipchains forward queue on FW). I'll need to intercept the internet $INET-IP coming from the inner LAN, masq them in the firewall to DMZ-IP and send them to the dmz interface. How would I do that? Linux Kernel is 2.2.16. Suggestions appreciated, Thanks, Samartha

1 0

Re: [suse-security] Firewall/Virusscanner
by Adam Daniel 04 Dec '00

04 Dec '00

Also ..have a look at at sophos intercheck for *nix: http://www.sophos.com/products/antivirus/server/ The server version provides you with a lib, and ive always found it a solid AV scanner. Adam > I have, AVP works like a champ on both SuSE and Redhat. Especially if > you use it with MFilter. (http://sourceforge.net/projects/mfilter) > Disclaimer: I occasionally do some work for the Mfilter project :) > Nix > At 10:29 PM 1/12/2000 +0100, you wrote: > >Hi all, > > > >Take a look @: > >http://www.avp.com/trial.html > >http://www.avp.com/topdownloads.html > >http://www.avp.ch/E/products.htm > >http://www.avp.ch/E/dlinux.htm > > > > > >May be this is interesting, i haven't tested any of these. > > > >Regards, > > > >Joop Boonen. > > > >Kurt Seifried wrote: > > > > > > > Okay, you could install virusscanners on all worstation, but my goal > > is to > > > > catch the virus and those damn pokémon BEFORE they can reach the > > > > workstations. <snip-chop>

1 0

proftpd and port forwarding
by Bastian Friedrich 04 Dec '00

04 Dec '00

Hi! Due to the inherent vulnerability of the wu.ftpd, I want to switch to a different ftp daemon after upgrading one of my Webservers. It's Webmasters need ftp access (*sigh*); plain text login is no choice, so port forwarding of the control connection through a secure tunnel is needed (in this case via ssh: ssh -L <port>:<server>:21 <server>). The precompiled packages from SuSE will not work this way; wuftpd needs an additional configure parameter at compile time to work. I was not able to get the standard in.ftpd or proftpd (preferred) work with a tunneled control connection. Am I missing something, or is this impossible? Bye, Bastian PS: Sorry if you regard this mail being rather of the "how do i configure..." type than security related... Let's try it here anyway ;) -- Bastian Friedrich bastian(a)bastian-friedrich.de Adress & Fon available on my HP http://www.bastian-friedrich.de/ \~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\ \ All things are green unless they are not.

3 3

md5sum openssh-2.3.0p1-0.i386.rpm
by Theo v. Werkhoven 04 Dec '00

04 Dec '00

Hi, Something strange here: I got the openssh update, but upon checking the md5sum I got: theo:/home/theo $ md5sum openssh-2.3.0p1-0.i386.rpm 3219bf7853c2c27056ec502b5fd3345c openssh-2.3.0p1-0.i386.rpm where the announcement says: SuSE-6.4 ftp://ftp.suse.de/pub/suse/i386/update/6.4/sec1/openssh-2.3.0p1-0.i386.rpm 04c17b0eba99c798ae401fb9aafbc7e4 Doing the rpm --checksig it returns md5 ok. What's going on? Cheers, Theo -- Theo v. Werkhoven <chtvanw(a)xs4all.nl> finger me for my GNUpg key Uptime: 50 days 16:30 hours BOFH excuse #323: Your processor has processed too many intructions. Turn it off emideately, do not type any commands!!

3 4

dienst blackjack?
by U. Schneider 03 Dec '00

03 Dec '00

Hallo Liste ! bin gerade am Abdichten meines Systems - dank dieser Liste hab ich schon einige Schrauben zum drehen gefunden ... aber nmap zeigt mir einen seltsamen Dienst am laufen, der mir äußerst suspekt vorkommt. Was bitte schön ist blackjack auf Port 1025/udp ? Auch der unknown dienst auf Port 1024/udp ist mir verdächtig. Vielen Dank Gruß Uli Hier mal was nmap meldete: Starting nmap V. 2.53 by fyodor(a)insecure.org ( www.insecure.org/nmap/ ) Host localhost (127.0.0.1) appears to be up ... good. Initiating SYN half-open stealth scan against localhost (127.0.0.1) Adding TCP port 25 (state open). Adding TCP port 119 (state open). Adding TCP port 80 (state open). Adding TCP port 110 (state open). Adding TCP port 23 (state open). Adding TCP port 53 (state open). Adding TCP port 111 (state open). Adding TCP port 113 (state open). Adding TCP port 8080 (state open). Adding TCP port 139 (state open). The SYN scan took 3 seconds to scan 1541 ports. Initiating FIN,NULL, UDP, or Xmas stealth scan against localhost (127.0.0.1) The UDP or stealth FIN/NULL/XMAS scan took 10 seconds to scan 1541 ports. For OSScan assuming that port 23 is open and port 1 is closed and neither are firewalled Interesting ports on localhost (127.0.0.1): (The 3063 ports scanned but not shown below are in state: closed) Port State Service 23/tcp open telnet 25/tcp open smtp 53/tcp open domain 53/udp open domain 67/udp open bootps 80/tcp open http 110/tcp open pop-3 111/tcp open sunrpc 111/udp open sunrpc 113/tcp open auth 119/tcp open nntp 137/udp open netbios-ns 138/udp open netbios-dgm 139/tcp open netbios-ssn 161/udp open snmp 1024/udp open unknown 1025/udp open blackjack 3130/udp open squid-ipc 8080/tcp open http-proxy TCP Sequence Prediction: Class=random positive increments Difficulty=6946651 (Good luck!) Sequence numbers: D21ADDF5 D21ADDF5 D15DB363 D15DB363 D24C7F62 D24C7F62 Remote operating system guess: Linux 2.1.122 - 2.2.14 Nmap run completed -- 1 IP address (1 host up) scanned in 16 seconds ___________________________ Disclaimer: The opinions expressed here are not those of my employer, my wife, my church, or myself... But they are the opinions of Elvis as revealed to me through the medium of my pet hamster, Lee Harvey Oswald...

6 6

Re: [suse-security] Re: password files for proftp
by Max Lindner 03 Dec '00

03 Dec '00

Hello Thom Am Don, 30 Nov 2000 schrieb Thorsten Marquardt: > Hello Magus > > Am 30-Nov-00 schrieb Magus Ba'al: > > > I got this from http://www.proftpd.net/docs/complex-virtual.conf > > > > AuthUserFile /where.ever.you.want.to.stick.it > > AuthGroupFile /where.ever.you.want.to.stick.it > > > > What _I_ prefer to do is create a directory, let's call it /var/domains. > > Because I host multiple domains, I put the auth files in /var/domains with > > the name , and then create a dir in /var/domain/(domain name). It keeps it > > neat and tidy for me if I ever need to find anything related to the > > domain. > > so far so good. But I don't know how to create the AuthUserFile itself. > why don't you use the program 'htpasswd', afaik it's delivered with apache. htpasswd makes a file with a username&password-File. this files contains in each line one user. It's build like the /etc/passwd: username:passwd:uid:gid:comments:Home-dir:shell but with htpasswd, you've only the 1st and 2nd entry, the others have to be edited by you. that's the way I do it... Max

2 1

Ethereal 8.14
by revans＠e-z.net 03 Dec '00

03 Dec '00

On Nov 20 Ethereal 8.14 was released. Redhat and Debian have 8.14 packages available, powertools 7.0 and the unstable tree in Debian. A notice was sent out on Freshmeat, the exploit was posted to Bugtraq, but there is nothing in suse-security-announce, on the security web page or in the SuSE 7.0 i386 updated packages directory on ftp.suse.com. Thank you Russell _http://www.ethereal.com/____________________________________________ _____ "An exploit for a buffer overrun in the AFS dissector was recently released on BugTraq. Ethereal 0.8.14 fixes this and other possibly-exploitable overruns. Also new in 0.8.14 are dissectors for WAP, SIP, AIM/OSCAR, 802.11, GIOP v1.2, and MGCP (plugin). Other dissectors were updated as well. Be sure to upgrade to 0.8.14 as soon as possible."

2 1

sendmail smtp after pop and Berkely DB
by jan.meyer 01 Dec '00

01 Dec '00

Hi list, I'm trying to implement a sendmail relay solution named relayer http://ps-ax.com/Relay/ Relayer works with the Berkely DB 2.x/3.x. libraries. I have installed sendmail-8.11.0-0 and berkdb2-2.7.7-16. But the call: # file /etc/mail/access* gives the following output: --- /etc/mail/access-times.db: Berkeley DB 2.X Hash/Little Endian (Version 5) /etc/mail/access.db: Berkeley DB 1.85 Hash/Little Endian (Version 2... --- the file /etc/mail/access-times.db comes from the relayer packet and uses Perl, which uses the newer version of Berkeley DB. Sendmails /etc/mail/access.db still uses the old 1.85 library. I've reinstalled berkdb2.rpm and sendmail.rpm with no effect. How can I tell sendmail to use the correct version of the Berkely DB libraries ? Do I have to recompile it, or are there other possibilities ? greets jan meyer

2 1

kmail bug ?
by creeper 272 01 Dec '00

01 Dec '00

hi, i am creepe272. i have a problem with kmail in suse 7.0 professionel. i download my mails and look at them. one mail from suse-security and i open it. suddenly, linux opens this mail again and aigain. until 256 times. than i press reset on my pc because linux doesn't react anymore. i thought it was a virus, but there was no file on that mail and the html-code was also alright. what could that mean. please help me, because i hate it when that happens. check forced ;) creeper272(a)yahoo.de __________________________________________________________________ Do You Yahoo!? Gesendet von Yahoo! Mail - http://mail.yahoo.de Yahoo! Auktionen - gleich ausprobieren - http://auktionen.yahoo.de

1 0

re sendmail sec
by webmaster 01 Dec '00

01 Dec '00

Thank you Sven, Antal +-------------------------------------------------------+ | Sven Hansen Celo Communications GmbH | | Dipl.-Chem. Weissenfelser Strasse 46a | | Senior Software Engineer D-06217 Merseburg | | mailto:sh@celocom.de http://www.celocom.de | | Phone: +49 (0)3461/3318-24 Fax: +49 (0)3461/415072 | +-------------------------------------------------------+ Unix _IS_ user friendly - it's just selective about who its friends are !

1 0

sendmail sec
by webmaster 01 Dec '00

01 Dec '00

Hi all, Returning from a week long job I have found events logged like that below. Unusual System Events =-=-=-=-=-=-=-=-=-=-= Nov 29 05:31:33 mand -- MARK -- Nov 29 05:42:33 mand sendmail[16558]: NOQUEUE: Null connection from IDENT:root@ns1.excitesystems.com [209.25.174.2] Nov 29 05:42:33 mand popper[16559]: refused connect from root(a)209.25.174.2 Nov 29 05:42:33 mand in.telnetd[16560]: refused connect from root(a)209.25.174.2 Nov 29 05:42:34 mand in.telnetd[16561]: refused connect from root(a)209.25.174.2 Would anyone help me understatnd these - especially that of sendmail? /-------------------------/ Antal Leisen webmaster(a)kreorg.hu Kreorg Educational Center Budapest, Hungary

2 1

SuSE 7.0: auto.net: symlinking own host in /net
by Steffen Dettmer 01 Dec '00

01 Dec '00

Useing SuSE 7.0 we found a problem (or missing feature or a bug, call it like you want). If the local machine exports more shares (i.e. "/", "/home" and may be more), the automounter won't work local (but remote). This is caused by a nice feature of the automounter: if the filesystem to mount is local, it's symlinked. This isn't working always, since after linking "/", the destination of the next link (i.e. "/home") already exists (since the kernel follows the first symlink). Additionally this makes no sense, since linking to "/" makes the whole filesystem accessible. A security problem occurs, since if "/" is exported readonly, the symlink is read-write. If you have some scripts working via NFS and automounter on a read-only share, it cannot write via /net/host/... normally, but if it's started on "host" itself, it is suddenly able to write! This needs attention, since some people start scripts on r/o mouted local shares to make sure to write action may happen. But in this scenario this isn't working as expected, any write action succeeds! This is important if you work with root-jails in r/o mounted local shares. In this case the quickiest workaround is: don't use autofs for that. To fix the first problem, it's neccesary to modify the output of the script /etc/auto.net. If this script reports only "/" as share, it works, so we just modified it in this way. A patch is attached. To install it, you may use the following commands: # cp /etc/auto.net /etc/auto.net.suse # patch -p0 < auto.net.patch Please note, that this will *NOT* fix the second, security related issue! The mounted local filesystem is writeable via /net/localhost, even if exported r/o! oki, Steffen -- Dieses Schreiben wurde maschinell erstellt, es trägt daher weder Unterschrift noch Siegel.

1 0

Re: Re: [suse-security] any nntp proxy ?
by Olivier Hislaire 01 Dec '00

01 Dec '00

At 03:24 PM 12/1/00 +0100, you wrote: > > accordingly to fwtk/libem/emo.c, 'f' seems to be a file descriptor > >Did you try to run the program under strace? If it's a missing file it will >print out the name, and even if it's something else canches are you'll be able >to understand what the problem is. > >Ciao, > Roberto. No, haven't tried yet, but it looks like the nntp-gw program expects to be already connected to the server when it receives the 'MODE READER' command from the client. Since I do not have the SERVER directive in the configuration file (using more than one news server), nntp-gw cannot connect immediately to the server; instead, it waits for the AUTHINFO USER command to retrieve the server name and connect. At least, if I connect to nntp-gw using 'telnet nntp-proxy 119', then issue the 'AUTHINFO USER news.software.ibm.com PASS ', I receive IBM's news server banner (that learnt to me those folks use INN). Working fine. But although configured properly (news server = nntp-proxy, user = news.software.ibm.com, pass = ), my newsreader (free agent 1.21) seems to send the MODE READER command first. Is the problem coming from Agent ? I am trying with netscape, but still am unable to find the right place to put my 'username' ... Again, any help appreciated. Olivier. ------------------------------------------------------------------------------------------------ Olivier Hislaire MSG International Email: O.Hislaire(a)msg-i.com 97 Avenue de Tervuren Phone: +32 (0)2 735.91.59 Ext. 55 1040 Brussels Fax: +32 (0)2 732.12.19 Belgium http://www.msg-i.com ------------------------------------------------------------------------------------------------

1 0

Re: [suse-security] vacation program doesnt work anymore because of sendmail security?
by M.C. Broersma 01 Dec '00

01 Dec '00

This problem is very difficult to solve. The forward rules should be executed under the uid of the person who does receive the mail. How can the sendmail deamon do that if it doesn't have root privileges. It cannot be solved by a configuration item. ...Minze

1 0

Re: [suse-security] any nntp proxy ?
by Olivier Hislaire 01 Dec '00

01 Dec '00

Thanks for all your suggestions. After a quick look, I decided to try and use the nntp-gw package (addition to the fwtk). This looked very promising, but I've been unable to use it so far. Syslog says: Dec 1 12:42:34 skimmer nntp-gw[951]: Starting daemon mode on port 119 Dec 1 12:42:59 skimmer kernel: SCSLog: connect - Name: nntp-gw | UID: 9 | EUID: 9 | PID: 956 | IP: 195.72.74.1 | Port: 53 Dec 1 12:42:59 skimmer kernel: SCSLog: connect - Name: nntp-gw | UID: 9 | EUID: 9 | PID: 956 | IP: 195.72.74.1 | Port: 53 Dec 1 12:42:59 skimmer nntp-gw[956]: permit host=charlie.be.msg-i.com/192.168.32.194 use of gateway Dec 1 12:43:00 skimmer nntp-gw[956]: command: MODE READER Dec 1 12:43:00 skimmer nntp-gw[956]: Assertion failed: f != NULL, file emo.c, line 176 Would anybody know about what it means ? accordingly to fwtk/libem/emo.c, 'f' seems to be a file descriptor, may be the connection to the server Since, I've checked that the server was available (telnet on port 119). Any idea or advice appreciated. Olivier. ------------------------------------------------------------------------------------------------ Olivier Hislaire MSG International Email: O.Hislaire(a)msg-i.com 97 Avenue de Tervuren Phone: +32 (0)2 735.91.59 Ext. 55 1040 Brussels Fax: +32 (0)2 732.12.19 Belgium http://www.msg-i.com ------------------------------------------------------------------------------------------------

1 0

vacation program doesnt work anymore because of sendmail security?
by suse＠diplan.de 01 Dec '00

01 Dec '00

Hi friends, after changing the righst of my sendmail from -r-sr-xr-x 1 root root 462412 Sep 6 01:17 /usr/sbin/sendmail to -rwxr-xr-x 1 root root 462412 Sep 6 01:17 /usr/sbin/sendmail which is because of security improvement, I cannot use the vacation program anymore. I did not find a configuration parameter to adjust the used mailer program in order to change it to a special version of sendmail with suid set which could at least get the vacation to run. Any ideas how to get the vacation to run anymore? Regards, Rainer --

1 0

Ftp Services disabled
by Pao Sayaovang 01 Dec '00

01 Dec '00

Hello: Im a newbie at Linux. Recently setup a SuSE 7.0 LinUx box and had everything going well. Until, I made a few changes in the /etc/rc.config and somehow disabled my FTP Services. I've also made changes in my etc/rc.config.d/firewall.rc.config too and now I totally blocked out of my ftp services. I know I'm not being clear on the info I've given but can anyone help me get started with re-enabling ftp services again. Is it? start Inetd="yes"?? start Proftpd="yes"???? Thanks, ___________________________ Pao Sayaovang Weyco Group, Inc DID(414) 908~1813 Fax(414) 908~1913 psayang(a)weycogroup.com

7 6

SuSE Linux 6.x 7.0 Ident buffer overflow
by Rash 01 Dec '00

01 Dec '00

http://linuxtoday.com/news_story.php3?ltsn=2000-11-28-024-04-SC-SS Has anybody exploit for this subj? I wanna check myself and my friends :-)

4 3