Randy Ivener
08/03/06, 18:00
This is a multi-part message in MIME format.
------_=_NextPart_001_01C64231.B6315414
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Cisco Response
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
This is Cisco PSIRT's response to the statements made by Arhont Ltd.-
Information Security in their messages:=20
"Cisco PIX embryonic state machine 1b data DoS"
and=20
"Cisco PIX embryonic state machine TTL(n-1) DoS"
both posted on March 7, 2006.
Attached is a cleartext, PGP signed version of this same email.
The original emails are available at: =20
http://www.securityfocus.com/archive/1/426989/30/0/threaded
and =20
http://www.securityfocus.com/archive/1/426991/30/0/threaded
These issues have the same root cause that was documented in Arhont
Ltd.- Information Security's message:=20
"[Full-disclosure] Cisco PIX TCP Connection Prevention",
posted on November 22, 2005 at:=20
http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038971.
html
As detailed in our reply also dated November 22, 2005, this issue is
being tracked by two Cisco Bug ID's:
* CSCsc14915 -- PIX 6.3 Spoofed TCP SYN packets can block
legitimate TCP connections
This Bug ID tracks the issue for PIX software version 6.3 and
older. This DDTS is resolved and available in PIX software
version 6.3(5.106). There are workarounds available to mitigate
the issue.
* CSCsc16014 -- PIX 7.0 Spoofed TCP SYN packets can block
legitimate TCP connections
This Bug ID tracks the issue for PIX/ASA software version 7.0.
This DDTS is resolved and available in PIX/ASA software versions
7.0(4.005) and 7.1(1). Additional mitigations and workarounds
exist to limit or eliminate the issue.
Our November 22, 2005 reply is available at:
http://www.cisco.com/warp/public/707/cisco-response-20051122-pix.shtml
We would like to thank Arhont Ltd.- Information Security for ensuring
that these issues were previously addressed as well.
We greatly appreciate the opportunity to work with researchers on
security vulnerabilities, and welcome the opportunity to review and
assist in product reports.
Additional Information
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3 D=3D=3D=3D=3D=3D
There have been updates to the information available for these two
Bug ID's since November 22, 2005. The updated Release Note Enclosures
are available at:
CSCsc14915 -- PIX 6.3 Spoofed TCP SYN packets can block legitimate
TCP connections
http://www.cisco.com/pcgi-bin/Support/Bugtool/onebug.pl?bugid=3DCSCsc1491=
5
(registered customers only:
http://tools.cisco.com/RPF/register/register.do)
CSCsc16014 -- PIX 7.0 Spoofed TCP SYN packets can block legitimate
TCP connections
http://www.cisco.com/pcgi-bin/Support/Bugtool/onebug.pl?bugid=3DCSCsc1601=
4
(registered customers only:
http://tools.cisco.com/RPF/register/register.do)
Cisco Security Procedures
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3 D=3D=3D=3D=3D=3D=3D=3D=3D=
Complete information on reporting security vulnerabilities in Cisco
products, obtaining assistance with security incidents, and
registering to receive security information from Cisco, is available
on Cisco's worldwide website at=20
http://www.cisco.com/en/US/products/products_security_vulnerability_poli
cy.html=20
This includes instructions for press inquiries regarding Cisco=20
security notices. All Cisco security advisories are available at=20
http://www.cisco.com/go/psirt=20
Regards,=20
Randy=20
Randy Ivener
Product Security Incident Response Team (PSIRT)
Cisco Systems, Inc.
rivener@cisco.com=20
http://www.cisco.com/go/psirt
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1
iQA/AwUBRA4AxW4/EyDEWh8IEQIQqgCgrwslVgYEzO1A5Rj3d9/AWeXg7GsAoNzC
+6AAI0jL5lAIkBM7Zb/RdTqM
=3DBOJ5
-----END PGP SIGNATURE-----
------_=_NextPart_001_01C64231.B6315414
Content-Type: application/octet-stream;
name="cisco-bugtraq-Cisco-PIX-embryonic-state-machine-TTLn-1-DoS-and-embryonic-state-machine-1b-data-DoS.txt.asc"
Content-Transfer-Encoding: base64
Content-Description: cisco-bugtraq-Cisco-PIX-embryonic-state-machine-TTLn-1-DoS-and-embryonic-state-machine-1b-data-DoS.txt.asc
Content-Disposition: attachment;
filename="cisco-bugtraq-Cisco-PIX-embryonic-state-machine-TTLn-1-DoS-and-embryonic-state-machine-1b-data-DoS.txt.asc"
LS0tLS1CRUdJTiBQR1AgU0lHTkVEIE1FU1NBR0UtLS0tLQ0KSG FzaDogU0hBMQ0KDQpDaXNjbyBS
ZXNwb25zZQ0KPT09PT09PT09PT09PT0NCg0KVGhpcyBpcyBDaX NjbyBQU0lSVCdzIHJlc3BvbnNl
IHRvIHRoZSBzdGF0ZW1lbnRzIG1hZGUgYnkgQXJob250IEx0ZC 4tDQpJbmZvcm1hdGlvbiBTZWN1
cml0eSBpbiB0aGVpciBtZXNzYWdlczogDQoiQ2lzY28gUElYIG VtYnJ5b25pYyBzdGF0ZSBtYWNo
aW5lIDFiIGRhdGEgRG9TIg0KYW5kIA0KIkNpc2NvIFBJWCBlbW JyeW9uaWMgc3RhdGUgbWFjaGlu
ZSBUVEwobi0xKSBEb1MiDQpib3RoIHBvc3RlZCBvbiBNYXJjaC A3LCAyMDA2Lg0KDQpUaGUgb3Jp
Z2luYWwgZW1haWxzIGFyZSBhdmFpbGFibGUgYXQ6ICANCmh0dH A6Ly93d3cuc2VjdXJpdHlmb2N1
cy5jb20vYXJjaGl2ZS8xLzQyNjk4OS8zMC8wL3RocmVhZGVkDQ phbmQgICAgDQpodHRwOi8vd3d3
LnNlY3VyaXR5Zm9jdXMuY29tL2FyY2hpdmUvMS80MjY5OTEvMz AvMC90aHJlYWRlZA0KDQpUaGVz
ZSBpc3N1ZXMgaGF2ZSB0aGUgc2FtZSByb290IGNhdXNlIHRoYX Qgd2FzIGRvY3VtZW50ZWQgaW4g
QXJob250DQpMdGQuLSBJbmZvcm1hdGlvbiBTZWN1cml0eSdzIG 1lc3NhZ2U6IA0KIltGdWxsLWRp
c2Nsb3N1cmVdIENpc2NvIFBJWCBUQ1AgQ29ubmVjdGlvbiBQcm V2ZW50aW9uIiwNCnBvc3RlZCBv
biBOb3ZlbWJlciAyMiwgMjAwNSBhdDogDQpodHRwOi8vbGlzdH MuZ3Jvay5vcmcudWsvcGlwZXJt
YWlsL2Z1bGwtZGlzY2xvc3VyZS8yMDA1LU5vdmVtYmVyLzAzOD k3MS5odG1sDQoNCkFzIGRldGFp
bGVkIGluIG91ciByZXBseSBhbHNvIGRhdGVkIE5vdmVtYmVyID IyLCAyMDA1LCB0aGlzIGlzc3Vl
IGlzDQpiZWluZyB0cmFja2VkIGJ5IHR3byBDaXNjbyBCdWcgSU QnczoNCg0KDQogICogQ1NDc2Mx
NDkxNSAtLSBQSVggNi4zIFNwb29mZWQgVENQIFNZTiBwYWNrZX RzIGNhbiBibG9jaw0KICAgIGxl
Z2l0aW1hdGUgVENQIGNvbm5lY3Rpb25zDQogICAgVGhpcyBCdW cgSUQgdHJhY2tzIHRoZSBpc3N1
ZSBmb3IgUElYIHNvZnR3YXJlIHZlcnNpb24gNi4zIGFuZA0KIC AgIG9sZGVyLiBUaGlzIEREVFMg
aXMgcmVzb2x2ZWQgYW5kIGF2YWlsYWJsZSBpbiBQSVggc29mdH dhcmUNCiAgICB2ZXJzaW9uIDYu
Myg1LjEwNikuIFRoZXJlIGFyZSB3b3JrYXJvdW5kcyBhdmFpbG FibGUgdG8gbWl0aWdhdGUNCiAg
ICB0aGUgaXNzdWUuDQoNCg0KICAqIENTQ3NjMTYwMTQgLS0gUE lYIDcuMCBTcG9vZmVkIFRDUCBT
WU4gcGFja2V0cyBjYW4gYmxvY2sNCiAgICBsZWdpdGltYXRlIF RDUCBjb25uZWN0aW9ucw0KICAg
IFRoaXMgQnVnIElEIHRyYWNrcyB0aGUgaXNzdWUgZm9yIFBJWC 9BU0Egc29mdHdhcmUgdmVyc2lv
biA3LjAuDQogICAgVGhpcyBERFRTIGlzIHJlc29sdmVkIGFuZC BhdmFpbGFibGUgaW4gUElYL0FT
QSBzb2Z0d2FyZSB2ZXJzaW9ucw0KICAgIDcuMCg0LjAwNSkgYW 5kIDcuMSgxKS4gQWRkaXRpb25h
bCBtaXRpZ2F0aW9ucyBhbmQgd29ya2Fyb3VuZHMNCiAgICBleG lzdCB0byBsaW1pdCBvciBlbGlt
aW5hdGUgdGhlIGlzc3VlLg0KDQoNCk91ciBOb3ZlbWJlciAyMi wgMjAwNSByZXBseSBpcyBhdmFp
bGFibGUgYXQ6DQpodHRwOi8vd3d3LmNpc2NvLmNvbS93YXJwL3 B1YmxpYy83MDcvY2lzY28tcmVz
cG9uc2UtMjAwNTExMjItcGl4LnNodG1sDQoNCldlIHdvdWxkIG xpa2UgdG8gdGhhbmsgQXJob250
IEx0ZC4tIEluZm9ybWF0aW9uIFNlY3VyaXR5IGZvciBlbnN1cm luZw0KdGhhdCB0aGVzZSBpc3N1
ZXMgd2VyZSBwcmV2aW91c2x5IGFkZHJlc3NlZCBhcyB3ZWxsLg 0KDQpXZSBncmVhdGx5IGFwcHJl
Y2lhdGUgdGhlIG9wcG9ydHVuaXR5IHRvIHdvcmsgd2l0aCByZX NlYXJjaGVycyBvbg0Kc2VjdXJp
dHkgdnVsbmVyYWJpbGl0aWVzLCBhbmQgd2VsY29tZSB0aGUgb3 Bwb3J0dW5pdHkgdG8gcmV2aWV3
IGFuZA0KYXNzaXN0IGluIHByb2R1Y3QgcmVwb3J0cy4NCg0KDQ pBZGRpdGlvbmFsIEluZm9ybWF0
aW9uDQo9PT09PT09PT09PT09PT09PT09PT09DQoNClRoZXJlIG hhdmUgYmVlbiB1cGRhdGVzIHRv
IHRoZSBpbmZvcm1hdGlvbiBhdmFpbGFibGUgZm9yIHRoZXNlIH R3bw0KQnVnIElEJ3Mgc2luY2Ug
Tm92ZW1iZXIgMjIsIDIwMDUuIFRoZSB1cGRhdGVkIFJlbGVhc2 UgTm90ZSBFbmNsb3N1cmVzDQph
cmUgYXZhaWxhYmxlIGF0Og0KDQoNCkNTQ3NjMTQ5MTUgLS0gUE lYIDYuMyBTcG9vZmVkIFRDUCBT
WU4gcGFja2V0cyBjYW4gYmxvY2sgbGVnaXRpbWF0ZQ0KVENQIG Nvbm5lY3Rpb25zDQoNCmh0dHA6
Ly93d3cuY2lzY28uY29tL3BjZ2ktYmluL1N1cHBvcnQvQnVndG 9vbC9vbmVidWcucGw/YnVnaWQ9
Q1NDc2MxNDkxNQ0KKHJlZ2lzdGVyZWQgY3VzdG9tZXJzIG9ubH k6IGh0dHA6Ly90b29scy5jaXNj
by5jb20vUlBGL3JlZ2lzdGVyL3JlZ2lzdGVyLmRvKQ0KDQoNCk NTQ3NjMTYwMTQgLS0gUElYIDcu
MCBTcG9vZmVkIFRDUCBTWU4gcGFja2V0cyBjYW4gYmxvY2sgbG VnaXRpbWF0ZQ0KVENQIGNvbm5l
Y3Rpb25zDQoNCmh0dHA6Ly93d3cuY2lzY28uY29tL3BjZ2ktYm luL1N1cHBvcnQvQnVndG9vbC9v
bmVidWcucGw/YnVnaWQ9Q1NDc2MxNjAxNA0KKHJlZ2lzdGVyZWQgY3VzdG9tZX JzIG9ubHk6IGh0
dHA6Ly90b29scy5jaXNjby5jb20vUlBGL3JlZ2lzdGVyL3JlZ2 lzdGVyLmRvKQ0KDQoNCkNpc2Nv
IFNlY3VyaXR5IFByb2NlZHVyZXMNCj09PT09PT09PT09PT09PT 09PT09PT09PT0NCg0KQ29tcGxl
dGUgaW5mb3JtYXRpb24gb24gcmVwb3J0aW5nIHNlY3VyaXR5IH Z1bG5lcmFiaWxpdGllcyBpbiBD
aXNjbw0KcHJvZHVjdHMsIG9idGFpbmluZyBhc3Npc3RhbmNlIH dpdGggc2VjdXJpdHkgaW5jaWRl
bnRzLCBhbmQNCnJlZ2lzdGVyaW5nIHRvIHJlY2VpdmUgc2VjdX JpdHkgaW5mb3JtYXRpb24gZnJv
bSBDaXNjbywgaXMgYXZhaWxhYmxlDQpvbiBDaXNjbydzIHdvcm xkd2lkZSB3ZWJzaXRlIGF0IA0K
aHR0cDovL3d3dy5jaXNjby5jb20vZW4vVVMvcHJvZHVjdHMvcH JvZHVjdHNfc2VjdXJpdHlfdnVs
bmVyYWJpbGl0eV9wb2xpY3kuaHRtbCANClRoaXMgaW5jbHVkZX MgaW5zdHJ1Y3Rpb25zIGZvciBw
cmVzcyBpbnF1aXJpZXMgcmVnYXJkaW5nIENpc2NvIA0Kc2VjdX JpdHkgbm90aWNlcy4gQWxsIENp
c2NvIHNlY3VyaXR5IGFkdmlzb3JpZXMgYXJlIGF2YWlsYWJsZS BhdCANCmh0dHA6Ly93d3cuY2lz
Y28uY29tL2dvL3BzaXJ0DQoNCg0KLS0tLS1CRUdJTiBQR1AgU0 lHTkFUVVJFLS0tLS0NClZlcnNp
b246IFBHUCA4LjENCg0KaVFBL0F3VUJSQTM5azI0L0V5REVXaD hJRVFKem5nQ2cvN3Z0UnpqaWg0
UWZIMGNhWFpZYVZCVWdERFlBblJRTA0KSzhRSUFySzFHTENXZm w5VGN5Rm1GenhWDQo9Z3pscg0K
LS0tLS1FTkQgUEdQIFNJR05BVFVSRS0tLS0tDQo=
------_=_NextPart_001_01C64231.B6315414--
------_=_NextPart_001_01C64231.B6315414
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Cisco Response
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
This is Cisco PSIRT's response to the statements made by Arhont Ltd.-
Information Security in their messages:=20
"Cisco PIX embryonic state machine 1b data DoS"
and=20
"Cisco PIX embryonic state machine TTL(n-1) DoS"
both posted on March 7, 2006.
Attached is a cleartext, PGP signed version of this same email.
The original emails are available at: =20
http://www.securityfocus.com/archive/1/426989/30/0/threaded
and =20
http://www.securityfocus.com/archive/1/426991/30/0/threaded
These issues have the same root cause that was documented in Arhont
Ltd.- Information Security's message:=20
"[Full-disclosure] Cisco PIX TCP Connection Prevention",
posted on November 22, 2005 at:=20
http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038971.
html
As detailed in our reply also dated November 22, 2005, this issue is
being tracked by two Cisco Bug ID's:
* CSCsc14915 -- PIX 6.3 Spoofed TCP SYN packets can block
legitimate TCP connections
This Bug ID tracks the issue for PIX software version 6.3 and
older. This DDTS is resolved and available in PIX software
version 6.3(5.106). There are workarounds available to mitigate
the issue.
* CSCsc16014 -- PIX 7.0 Spoofed TCP SYN packets can block
legitimate TCP connections
This Bug ID tracks the issue for PIX/ASA software version 7.0.
This DDTS is resolved and available in PIX/ASA software versions
7.0(4.005) and 7.1(1). Additional mitigations and workarounds
exist to limit or eliminate the issue.
Our November 22, 2005 reply is available at:
http://www.cisco.com/warp/public/707/cisco-response-20051122-pix.shtml
We would like to thank Arhont Ltd.- Information Security for ensuring
that these issues were previously addressed as well.
We greatly appreciate the opportunity to work with researchers on
security vulnerabilities, and welcome the opportunity to review and
assist in product reports.
Additional Information
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3 D=3D=3D=3D=3D=3D
There have been updates to the information available for these two
Bug ID's since November 22, 2005. The updated Release Note Enclosures
are available at:
CSCsc14915 -- PIX 6.3 Spoofed TCP SYN packets can block legitimate
TCP connections
http://www.cisco.com/pcgi-bin/Support/Bugtool/onebug.pl?bugid=3DCSCsc1491=
5
(registered customers only:
http://tools.cisco.com/RPF/register/register.do)
CSCsc16014 -- PIX 7.0 Spoofed TCP SYN packets can block legitimate
TCP connections
http://www.cisco.com/pcgi-bin/Support/Bugtool/onebug.pl?bugid=3DCSCsc1601=
4
(registered customers only:
http://tools.cisco.com/RPF/register/register.do)
Cisco Security Procedures
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3 D=3D=3D=3D=3D=3D=3D=3D=3D=
Complete information on reporting security vulnerabilities in Cisco
products, obtaining assistance with security incidents, and
registering to receive security information from Cisco, is available
on Cisco's worldwide website at=20
http://www.cisco.com/en/US/products/products_security_vulnerability_poli
cy.html=20
This includes instructions for press inquiries regarding Cisco=20
security notices. All Cisco security advisories are available at=20
http://www.cisco.com/go/psirt=20
Regards,=20
Randy=20
Randy Ivener
Product Security Incident Response Team (PSIRT)
Cisco Systems, Inc.
rivener@cisco.com=20
http://www.cisco.com/go/psirt
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1
iQA/AwUBRA4AxW4/EyDEWh8IEQIQqgCgrwslVgYEzO1A5Rj3d9/AWeXg7GsAoNzC
+6AAI0jL5lAIkBM7Zb/RdTqM
=3DBOJ5
-----END PGP SIGNATURE-----
------_=_NextPart_001_01C64231.B6315414
Content-Type: application/octet-stream;
name="cisco-bugtraq-Cisco-PIX-embryonic-state-machine-TTLn-1-DoS-and-embryonic-state-machine-1b-data-DoS.txt.asc"
Content-Transfer-Encoding: base64
Content-Description: cisco-bugtraq-Cisco-PIX-embryonic-state-machine-TTLn-1-DoS-and-embryonic-state-machine-1b-data-DoS.txt.asc
Content-Disposition: attachment;
filename="cisco-bugtraq-Cisco-PIX-embryonic-state-machine-TTLn-1-DoS-and-embryonic-state-machine-1b-data-DoS.txt.asc"
LS0tLS1CRUdJTiBQR1AgU0lHTkVEIE1FU1NBR0UtLS0tLQ0KSG FzaDogU0hBMQ0KDQpDaXNjbyBS
ZXNwb25zZQ0KPT09PT09PT09PT09PT0NCg0KVGhpcyBpcyBDaX NjbyBQU0lSVCdzIHJlc3BvbnNl
IHRvIHRoZSBzdGF0ZW1lbnRzIG1hZGUgYnkgQXJob250IEx0ZC 4tDQpJbmZvcm1hdGlvbiBTZWN1
cml0eSBpbiB0aGVpciBtZXNzYWdlczogDQoiQ2lzY28gUElYIG VtYnJ5b25pYyBzdGF0ZSBtYWNo
aW5lIDFiIGRhdGEgRG9TIg0KYW5kIA0KIkNpc2NvIFBJWCBlbW JyeW9uaWMgc3RhdGUgbWFjaGlu
ZSBUVEwobi0xKSBEb1MiDQpib3RoIHBvc3RlZCBvbiBNYXJjaC A3LCAyMDA2Lg0KDQpUaGUgb3Jp
Z2luYWwgZW1haWxzIGFyZSBhdmFpbGFibGUgYXQ6ICANCmh0dH A6Ly93d3cuc2VjdXJpdHlmb2N1
cy5jb20vYXJjaGl2ZS8xLzQyNjk4OS8zMC8wL3RocmVhZGVkDQ phbmQgICAgDQpodHRwOi8vd3d3
LnNlY3VyaXR5Zm9jdXMuY29tL2FyY2hpdmUvMS80MjY5OTEvMz AvMC90aHJlYWRlZA0KDQpUaGVz
ZSBpc3N1ZXMgaGF2ZSB0aGUgc2FtZSByb290IGNhdXNlIHRoYX Qgd2FzIGRvY3VtZW50ZWQgaW4g
QXJob250DQpMdGQuLSBJbmZvcm1hdGlvbiBTZWN1cml0eSdzIG 1lc3NhZ2U6IA0KIltGdWxsLWRp
c2Nsb3N1cmVdIENpc2NvIFBJWCBUQ1AgQ29ubmVjdGlvbiBQcm V2ZW50aW9uIiwNCnBvc3RlZCBv
biBOb3ZlbWJlciAyMiwgMjAwNSBhdDogDQpodHRwOi8vbGlzdH MuZ3Jvay5vcmcudWsvcGlwZXJt
YWlsL2Z1bGwtZGlzY2xvc3VyZS8yMDA1LU5vdmVtYmVyLzAzOD k3MS5odG1sDQoNCkFzIGRldGFp
bGVkIGluIG91ciByZXBseSBhbHNvIGRhdGVkIE5vdmVtYmVyID IyLCAyMDA1LCB0aGlzIGlzc3Vl
IGlzDQpiZWluZyB0cmFja2VkIGJ5IHR3byBDaXNjbyBCdWcgSU QnczoNCg0KDQogICogQ1NDc2Mx
NDkxNSAtLSBQSVggNi4zIFNwb29mZWQgVENQIFNZTiBwYWNrZX RzIGNhbiBibG9jaw0KICAgIGxl
Z2l0aW1hdGUgVENQIGNvbm5lY3Rpb25zDQogICAgVGhpcyBCdW cgSUQgdHJhY2tzIHRoZSBpc3N1
ZSBmb3IgUElYIHNvZnR3YXJlIHZlcnNpb24gNi4zIGFuZA0KIC AgIG9sZGVyLiBUaGlzIEREVFMg
aXMgcmVzb2x2ZWQgYW5kIGF2YWlsYWJsZSBpbiBQSVggc29mdH dhcmUNCiAgICB2ZXJzaW9uIDYu
Myg1LjEwNikuIFRoZXJlIGFyZSB3b3JrYXJvdW5kcyBhdmFpbG FibGUgdG8gbWl0aWdhdGUNCiAg
ICB0aGUgaXNzdWUuDQoNCg0KICAqIENTQ3NjMTYwMTQgLS0gUE lYIDcuMCBTcG9vZmVkIFRDUCBT
WU4gcGFja2V0cyBjYW4gYmxvY2sNCiAgICBsZWdpdGltYXRlIF RDUCBjb25uZWN0aW9ucw0KICAg
IFRoaXMgQnVnIElEIHRyYWNrcyB0aGUgaXNzdWUgZm9yIFBJWC 9BU0Egc29mdHdhcmUgdmVyc2lv
biA3LjAuDQogICAgVGhpcyBERFRTIGlzIHJlc29sdmVkIGFuZC BhdmFpbGFibGUgaW4gUElYL0FT
QSBzb2Z0d2FyZSB2ZXJzaW9ucw0KICAgIDcuMCg0LjAwNSkgYW 5kIDcuMSgxKS4gQWRkaXRpb25h
bCBtaXRpZ2F0aW9ucyBhbmQgd29ya2Fyb3VuZHMNCiAgICBleG lzdCB0byBsaW1pdCBvciBlbGlt
aW5hdGUgdGhlIGlzc3VlLg0KDQoNCk91ciBOb3ZlbWJlciAyMi wgMjAwNSByZXBseSBpcyBhdmFp
bGFibGUgYXQ6DQpodHRwOi8vd3d3LmNpc2NvLmNvbS93YXJwL3 B1YmxpYy83MDcvY2lzY28tcmVz
cG9uc2UtMjAwNTExMjItcGl4LnNodG1sDQoNCldlIHdvdWxkIG xpa2UgdG8gdGhhbmsgQXJob250
IEx0ZC4tIEluZm9ybWF0aW9uIFNlY3VyaXR5IGZvciBlbnN1cm luZw0KdGhhdCB0aGVzZSBpc3N1
ZXMgd2VyZSBwcmV2aW91c2x5IGFkZHJlc3NlZCBhcyB3ZWxsLg 0KDQpXZSBncmVhdGx5IGFwcHJl
Y2lhdGUgdGhlIG9wcG9ydHVuaXR5IHRvIHdvcmsgd2l0aCByZX NlYXJjaGVycyBvbg0Kc2VjdXJp
dHkgdnVsbmVyYWJpbGl0aWVzLCBhbmQgd2VsY29tZSB0aGUgb3 Bwb3J0dW5pdHkgdG8gcmV2aWV3
IGFuZA0KYXNzaXN0IGluIHByb2R1Y3QgcmVwb3J0cy4NCg0KDQ pBZGRpdGlvbmFsIEluZm9ybWF0
aW9uDQo9PT09PT09PT09PT09PT09PT09PT09DQoNClRoZXJlIG hhdmUgYmVlbiB1cGRhdGVzIHRv
IHRoZSBpbmZvcm1hdGlvbiBhdmFpbGFibGUgZm9yIHRoZXNlIH R3bw0KQnVnIElEJ3Mgc2luY2Ug
Tm92ZW1iZXIgMjIsIDIwMDUuIFRoZSB1cGRhdGVkIFJlbGVhc2 UgTm90ZSBFbmNsb3N1cmVzDQph
cmUgYXZhaWxhYmxlIGF0Og0KDQoNCkNTQ3NjMTQ5MTUgLS0gUE lYIDYuMyBTcG9vZmVkIFRDUCBT
WU4gcGFja2V0cyBjYW4gYmxvY2sgbGVnaXRpbWF0ZQ0KVENQIG Nvbm5lY3Rpb25zDQoNCmh0dHA6
Ly93d3cuY2lzY28uY29tL3BjZ2ktYmluL1N1cHBvcnQvQnVndG 9vbC9vbmVidWcucGw/YnVnaWQ9
Q1NDc2MxNDkxNQ0KKHJlZ2lzdGVyZWQgY3VzdG9tZXJzIG9ubH k6IGh0dHA6Ly90b29scy5jaXNj
by5jb20vUlBGL3JlZ2lzdGVyL3JlZ2lzdGVyLmRvKQ0KDQoNCk NTQ3NjMTYwMTQgLS0gUElYIDcu
MCBTcG9vZmVkIFRDUCBTWU4gcGFja2V0cyBjYW4gYmxvY2sgbG VnaXRpbWF0ZQ0KVENQIGNvbm5l
Y3Rpb25zDQoNCmh0dHA6Ly93d3cuY2lzY28uY29tL3BjZ2ktYm luL1N1cHBvcnQvQnVndG9vbC9v
bmVidWcucGw/YnVnaWQ9Q1NDc2MxNjAxNA0KKHJlZ2lzdGVyZWQgY3VzdG9tZX JzIG9ubHk6IGh0
dHA6Ly90b29scy5jaXNjby5jb20vUlBGL3JlZ2lzdGVyL3JlZ2 lzdGVyLmRvKQ0KDQoNCkNpc2Nv
IFNlY3VyaXR5IFByb2NlZHVyZXMNCj09PT09PT09PT09PT09PT 09PT09PT09PT0NCg0KQ29tcGxl
dGUgaW5mb3JtYXRpb24gb24gcmVwb3J0aW5nIHNlY3VyaXR5IH Z1bG5lcmFiaWxpdGllcyBpbiBD
aXNjbw0KcHJvZHVjdHMsIG9idGFpbmluZyBhc3Npc3RhbmNlIH dpdGggc2VjdXJpdHkgaW5jaWRl
bnRzLCBhbmQNCnJlZ2lzdGVyaW5nIHRvIHJlY2VpdmUgc2VjdX JpdHkgaW5mb3JtYXRpb24gZnJv
bSBDaXNjbywgaXMgYXZhaWxhYmxlDQpvbiBDaXNjbydzIHdvcm xkd2lkZSB3ZWJzaXRlIGF0IA0K
aHR0cDovL3d3dy5jaXNjby5jb20vZW4vVVMvcHJvZHVjdHMvcH JvZHVjdHNfc2VjdXJpdHlfdnVs
bmVyYWJpbGl0eV9wb2xpY3kuaHRtbCANClRoaXMgaW5jbHVkZX MgaW5zdHJ1Y3Rpb25zIGZvciBw
cmVzcyBpbnF1aXJpZXMgcmVnYXJkaW5nIENpc2NvIA0Kc2VjdX JpdHkgbm90aWNlcy4gQWxsIENp
c2NvIHNlY3VyaXR5IGFkdmlzb3JpZXMgYXJlIGF2YWlsYWJsZS BhdCANCmh0dHA6Ly93d3cuY2lz
Y28uY29tL2dvL3BzaXJ0DQoNCg0KLS0tLS1CRUdJTiBQR1AgU0 lHTkFUVVJFLS0tLS0NClZlcnNp
b246IFBHUCA4LjENCg0KaVFBL0F3VUJSQTM5azI0L0V5REVXaD hJRVFKem5nQ2cvN3Z0UnpqaWg0
UWZIMGNhWFpZYVZCVWdERFlBblJRTA0KSzhRSUFySzFHTENXZm w5VGN5Rm1GenhWDQo9Z3pscg0K
LS0tLS1FTkQgUEdQIFNJR05BVFVSRS0tLS0tDQo=
------_=_NextPart_001_01C64231.B6315414--