[FD] Barracuda Networks Message Archiver 650 - Persistent Input Validation Vulnerability (BNSEC 703)
Vulnerability Lab <[email protected]> Fri, 18 Jul 2014 11:07:02 +0200
| Newsgroups | gmane.comp.security.fulldisclosure,gmane.comp.security.full-disclosure |
|---|---|
| Message-ID | <[email protected]> |
RG9jdW1lbnQgVGl0bGU6Cj09PT09PT09PT09PT09PQpCYXJyYWN1ZGEgTmV0d29ya3MgTWVzc2Fn ZSBBcmNoaXZlciA2NTAgLSBQZXJzaXN0ZW50IElucHV0IFZhbGlkYXRpb24gVnVsbmVyYWJpbGl0 eQoKClJlZmVyZW5jZXMgKFNvdXJjZSk6Cj09PT09PT09PT09PT09PT09PT09Cmh0dHA6Ly93d3cu dnVsbmVyYWJpbGl0eS1sYWIuY29tL2dldF9jb250ZW50LnBocD9pZD03NTEKCmh0dHBzOi8vd3d3 LmJhcnJhY3VkYS5jb20vc3VwcG9ydC9rbm93bGVkZ2ViYXNlLzUwMTYwMDAwMDAxM2xYZQpCYXJy YWN1ZGEgTmV0d29ya3MgU2VjdXJpdHkgSUQgKEJOU0VDKTogNzAzCgpCTlNFQy0wMDcwMzogUmVt b3RlIGF1dGhlbnRpY2F0ZWQgcGVyc2lzdGVudCBYU1MgaW4gQmFycmFjdWRhIE1lc3NhZ2UgQXJj aGl2ZXIgdjMuMgpTb2x1dGlvbiAjMDAwMDY2MDQKCgpSZWxlYXNlIERhdGU6Cj09PT09PT09PT09 PT0KMjAxNC0wNy0xOAoKClZ1bG5lcmFiaWxpdHkgTGFib3JhdG9yeSBJRCAoVkwtSUQpOgo9PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KNzUxCgoKQ29tbW9uIFZ1bG5lcmFiaWxp dHkgU2NvcmluZyBTeXN0ZW06Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQoz LjYKCgpQcm9kdWN0ICYgU2VydmljZSBJbnRyb2R1Y3Rpb246Cj09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT0KVGhlIEJhcnJhY3VkYSBNZXNzYWdlIEFyY2hpdmVyIGlzIGEgY29tcGxldGUg YW5kIGFmZm9yZGFibGUgZW1haWwgYXJjaGl2aW5nIHNvbHV0aW9uLCBlbmFibGluZyB5b3UgdG8g ZWZmZWN0aXZlbHkgCmluZGV4IGFuZCBwcmVzZXJ2ZSBhbGwgZW1haWxzLCBlbmhhbmNlIG9wZXJh dGlvbmFsIGVmZmljaWVuY2llcyBhbmQgZW5mb3JjZSBwb2xpY2llcyBmb3IgcmVndWxhdG9yeSBj b21wbGlhbmNlLiBCeSAKbGV2ZXJhZ2luZyBzdGFuZGFyZCBwb2xpY2llcyBhbmQgc2VhbWxlc3Mg YWNjZXNzIHRvIG1lc3NhZ2VzLCBlbWFpbCBjb250ZW50IGlzIGZ1bGx5IGluZGV4ZWQgYW5kIGJh Y2tlZCB1cCB0byBlbmFibGUgCmFkbWluaXN0cmF0b3JzLCBhdWRpdG9ycyBhbmQgZW5kIHVzZXJz IHF1aWNrIHJldHJpZXZhbCBvZiBhbnkgZW1haWwgbWVzc2FnZSBzdG9yZWQgaW4gYW4gb3JnYW5p emF0aW9u4oCZcyBlbWFpbCBhcmNoaXZlLgoKICAgICogQ29tcHJlaGVuc2l2ZSBhcmNoaXZpbmcK ICAgICogRXhjaGFuZ2Ugc3R1YmJpbmcKICAgICogU2VhcmNoIGFuZCByZXRyaWV2YWwKICAgICog UG9saWN5IG1hbmFnZW1lbnQKICAgICogSW50ZWxsaWdlbnQgU3RvcmFnZSBNYW5hZ2VyCiAgICAq IFJvbGVzLWJhc2VkIGludGVyZmFjZQogICAgKiBSZXBvcnRpbmcgYW5kIHN0YXRpc3RpY3MKClRo ZSBCYXJyYWN1ZGEgTWVzc2FnZSBBcmNoaXZlciBwcm92aWRlcyBldmVyeXRoaW5nIGFuIG9yZ2Fu aXphdGlvbiBuZWVkcyB0byBjb21wbHkgd2l0aCBnb3Zlcm5tZW50IHJlZ3VsYXRpb25zIGluIGFu IAplYXN5IHRvIGluc3RhbGwgYW5kIGFkbWluaXN0ZXIgcGx1Zy1hbmQtcGxheSBoYXJkd2FyZSBz b2x1dGlvbi4gVGhlIEJhcnJhY3VkYSBNZXNzYWdlIEFyY2hpdmVyIHN0b3JlcyBhbmQgaW5kZXhl cyBhbGwgCmVtYWlsIGZvciBlYXN5IHNlYXJjaCBhbmQgcmV0cmlldmFsIGJ5IGJvdGggcmVndWxh ciB1c2VycyBhbmQgdGhpcmQtcGFydHkgYXVkaXRvcnMuIEJhY2tlZCBieSBFbmVyZ2l6ZSBVcGRh dGVzLCBkZWxpdmVyZWQgCmJ5IEJhcnJhY3VkYSBDZW50cmFsLCB0aGUgQmFycmFjdWRhIE1lc3Nh Z2UgQXJjaGl2ZXIgcmVjZWl2ZXMgYXV0b21hdGljIHVwZGF0ZXMgdG8gaXRzIGV4dGVuc2l2ZSBs aWJyYXJ5IG9mIHZpcnVzLCBwb2xpY3kgCmRlZmluaXRpb25zIHRvIGVuYWJsZSBlbmhhbmNlZCBt b25pdG9yaW5nIG9mIGNvbXBsaWFuY2UgYW5kIGNvcnBvcmF0ZSBndWlkZWxpbmVzLCBkb2N1bWVu dCBmaWxlIGZvcm1hdCB1cGRhdGVzIG5lZWRlZCB0byAKZGVjb2RlIGNvbnRlbnQgd2l0aGluIGVt YWlsIGF0dGFjaG1lbnRzLCBhcyB3ZWxsIGFzIHNlY3VyaXR5IHVwZGF0ZXMgZm9yIHRoZSB1bmRl cmx5aW5nIEJhcnJhY3VkYSBNZXNzYWdlIEFyY2hpdmVyIHBsYXRmb3JtIAp0byBwcm90ZWN0IGFn YWluc3QgYW55IHBvdGVudGlhbCBzZWN1cml0eSB2dWxuZXJhYmlsaXRpZXMuCgooQ29weSBvZiB0 aGUgVmVuZG9yIEhvbWVwYWdlOiBodHRwOi8vd3d3LmJhcnJhY3VkYW5ldHdvcmtzLmNvbSApCgoK QWJzdHJhY3QgQWR2aXNvcnkgSW5mb3JtYXRpb246Cj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQpUaGUgVnVsbmVyYWJpbGl0eSBMYWJvcmF0b3J5IFJlc2VhcmNoIFRlYW0gZGlzY292ZXJl ZCBhIHBlcnNpc3RlbnQgd2ViIHZ1bG5lcmFiaWxpdHkgaW4gQmFycmFjdWRhcyBNZXNzc2FnZSBB cmNoaXZlciAzLjIgQXBwbGlhbmNlIEFwcGxpY2F0aW9uLgoKClZ1bG5lcmFiaWxpdHkgRGlzY2xv c3VyZSBUaW1lbGluZToKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQoyMDEzLTEx LTA4OglSZXNlYXJjaGVyIE5vdGlmaWNhdGlvbiAmIENvb3JkaW5hdGlvbiAoQmVuamFtaW4gS3Vu eiBNZWpyaSkKMjAxMy0xMS0xMDoJVmVuZG9yIE5vdGlmaWNhdGlvbiAoQmFycmFjdWRhIE5ldHdv cmtzIC0gQnVnIEJvdW50eSBQcm9ncmFtKQoyMDEzLTExLTEzOglWZW5kb3IgUmVzcG9uc2UvRmVl ZGJhY2sgKEJhcnJhY3VkYSBOZXR3b3JrcyAtIEJ1ZyBCb3VudHkgUHJvZ3JhbSkKMjAxNC0wNi0z MToJVmVuZG9yIEZpeC9QYXRjaCAoQmFycmFjdWRhIE5ldHdvcmtzIERldmVsb3BlciBUZWFtIC0g UmV3YXJkOiAkJCQpCjIwMTQtMDAtMDA6CVB1YmxpYyBEaXNjbG9zdXJlIChWdWxuZXJhYmlsaXR5 IExhYm9yYXRvcnkpCgoKRGlzY292ZXJ5IFN0YXR1czoKPT09PT09PT09PT09PT09PT0KUHVibGlz aGVkCgoKQWZmZWN0ZWQgUHJvZHVjdChzKToKPT09PT09PT09PT09PT09PT09PT0KQmFycmFjdWRh IE5ldHdvcmtzClByb2R1Y3Q6IE1lc3NhZ2UgQXJjaGl2ZXIgNjUwIC0gQXBwbGlhbmNlIEFwcGxp Y2F0aW9uIDMuMS4wLjkxNAoKCkV4cGxvaXRhdGlvbiBUZWNobmlxdWU6Cj09PT09PT09PT09PT09 PT09PT09PT09ClJlbW90ZQoKClNldmVyaXR5IExldmVsOgo9PT09PT09PT09PT09PT0KTWVkaXVt CgoKVGVjaG5pY2FsIERldGFpbHMgJiBEZXNjcmlwdGlvbjoKPT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT0KQSBwZXJzaXN0ZW50IGlucHV0IHZhbGlkYXRpb24gd2ViIHZ1bG5lcmFiaWxp dHkgaGFzIGJlZW4gZGlzY292ZXJlZCBpbiB0aGUgb2ZmaWNpYWwgQmFycmFjdWRhIE5ldHdvcmtz IE1lc3NhZ2UgQXJjaGl2ZXIgNjUwIHYzLjIgYXBwbGlhbmNlIHdlYi1hcHBsaWNhdGlvbi4KVGhl IHJlbW90ZSB2dWxuZXJhYmlsaXR5IGFsbG93cyByZW1vdGUgYXR0YWNrZXJzIHRvIGluamVjdCBv d24gbWFsaWNpb3VzIHNjcmlwdCBjb2RlcyBvbiB0aGUgYXBwbGljYXRpb24tc2lkZSBvZiB0aGUg dnVsbmVyYWJsZSBhcHBsaWNhdGlvbiBtb2R1bGUuCgpUaGUgdnVsbmVyYWJpbGl0eSBpcyBsb2Nh dGVkIGluIHRoZSBgQmVudXR6ZXIgPiBOZXUgQW5sZWdlbiA+IFJvbGxlOiBBdWRpdG9yID4gRG9t w6RuZW5gIG1vZHVsZS4gUmVtb3RlIGF0dGFja2VycyBhcmUgYWJsZSB0byBpbmplY3Qgb3duIG1h bGljaW91cyBzY3JpcHQgCmNvZGVzIGluIHRoZSB2dWxuZXJhYmxlIGRvbWFpbl9saXN0X3RhYmxl LXIwIHZhbHVlcy4gVGhlIGV4ZWN1dGlvbiBvZiB0aGUgc2NyaXB0IGNvZGUgb2NjdXJzIGluIHRo ZSBkb21haW5fbGlzdF90YWJsZS1yMCBhbmQgdXNlcl9kb21haW5fYWRtaW46MSBhcHBsaWFuY2Ug CmFwcGxpY2F0aW9uIHJlc3BvbnNlIGNvbnRleHQuIFRoZSByZXF1ZXN0IG1ldGhvZCBpcyBQT1NU IGFuZCB0aGUgYXR0YWNrIHZlY3RvciBpcyBwZXJzaXN0ZW50IG9uIHRoZSBhcHBsaWNhdGlvbi1z aWRlIG9mIHRoZSBiYXJyYWN1ZGEgbmV0d29ya3MgbWVzc2FnZSAKYXJjaGl2ZXIgd2ViIGFwcGxp YW5jZS4gCgpUaGUgc2VjdXJpdHkgcmlzayBvZiB0aGUgcGVyc2lzdGVudCBpbnB1dCB2YWxpZGF0 aW9uIHdlYiB2dWxuZXJhYmlsaXR5IGlzIGVzdGltYXRlZCBhcyBtZWRpdW0gd2l0aCBhIGN2c3Mg KGNvbW1vbiB2dWxuZXJhYmlsaXR5IHNjb3Jpbmcgc3lzdGVtKSBjb3VudCBvZiAzLjYuCkV4cGxv aXRhdGlvbiBvZiB0aGUgdnVsbmVyYWJpbGl0eSByZXF1aXJlcyBhIGxvdyBwcml2aWxlZ2VkIG9y IHJlc3RyaWN0ZWQgYXBwbGljYXRpb24gdXNlciBhY2NvdW50IHdpdGggbG93IG9yIG1lZGl1bSB1 c2VyIGludGVyYWN0aW9uLiBTdWNjZXNzZnVsIGV4cGxvaXRhdGlvbiAKb2YgdGhlIHZ1bG5lcmFi aWxpdHkgcmVzdWx0cyBpbiBzZXNzaW9uIGhpamFja2luZywgcGVyc2lzdGVudCBwaGlzaGluZywg cGVyc2lzdGVudCBleHRlcm5hbCByZWRpcmVjdHMgYW5kIHBlcnNpc3RlbnQgbWFuaXB1bGF0aW9u IG9mIG1vZHVsZSBjb250ZXh0LgoKUmVxdWVzdCBNZXRob2Qocyk6CgkJCQlbK10gUE9TVAoKVnVs bmVyYWJsZSBNb2R1bGUocyk6CgkJCQlbK10gQmVudXR6ZXIgPiBOZXUgQW5sZWdlbiA+IFJvbGxl OiBBdWRpdG9yCgpWdWxuZXJhYmxlIElucHV0KHMpOgoJCQkJWytdIERvbcOkbmVuCgpWdWxuZXJh YmxlIFBhcmFtZXRlcihzKToKCQkJCVsrXSBkb21haW5fbGlzdF90YWJsZS1yMAoKQWZmZWN0ZWQg TW9kdWxlKHMpOgoJCQkJWytdIFJvbGxlOiBBdWRpdG9yIExpc3RpbmcKCgpQcm9vZiBvZiBDb25j ZXB0IChQb0MpOgo9PT09PT09PT09PT09PT09PT09PT09PQpUaGUgcGVyc2lzdGVudCB3ZWIgdnVs bmVyYWJpbGl0eSBjYW4gYmUgZXhwbG9pdGVkIGJ5IHJlbW90ZSBhdHRhY2tlcnMgd2l0aCBsb3cg cHJpdmlsZWdlZCBvciByZXN0cmljdGVkIGFwcGxpY2F0aW9uIHVzZXIgYWNjb3VudCBhbmQgbG93 IHJlcXVpcmVkIHVzZXIgaW50ZXIgYWN0aW9uLiAKRm9yIHNlY3VyaXR5IGRlbW9uc3RyYXRpb24g b3IgdG8gcmVwcm9kdWNlIHRoZSByZW1vdGUgd2ViIHZ1bG5lcmFiaWxpdHkgZm9sbG93IHRoZSBw cm92aWRlZCBpbmZvcm1hdGlvbiBhbmQgc3RlcHMgYmVsb3cgdG8gY29udGludWUuCgotLS0gUG9D IFNlc3Npb24gTG9ncyBbUE9TVF0gLS0tCmFqYXhfYmNfc3ViPWFkZERvbWFpbgpkb21haW49JTIy JTNFJTNDaWZyYW1lJTIwc3JjJTNEaHR0cCUzQSUyRiUyRnZ1bG4tbGFiLmNvbSUyMG9ubG9hZCUz RGFsZXJ0KGRvY3VtZW50LmNvb2tpZSklMjAlM0MlMjAlMjAlMjIlM0UlM0NpZnJhbWUlMjBzcmMK JTNEaHR0cCUzQSUyRiUyRnZ1bG4tbGFiLmNvbSUyMG9ubG9hZCUzRGFsZXJ0KGRvY3VtZW50LmNv b2tpZSklMjAlM0MKdXNlcj1ndWVzdApwYXNzd29yZD03NTM2MWRhOTUzMzIyM2Q5Njg1NTc2ZDEw YmQ2YWEwMgpldD0KMTM1MjUyMDYyOApsb2NhbGU9ZGVfREUKcmVhbG09CmF1dGhfdHlwZT1Mb2Nh bApwcmltYXJ5X3RhYj1VU0VSUwpzZWNvbmRhcnlfdGFiPXBlcl91c2VyX2FkZF91cGRhdGUKCgpQ b0MgKFVSTCk6IApodHRwOi8vYXJjaGl2ZXIucHRlc3QubG9jYWxob3N0OjMzNzgvY2dpLW1vZC9p bmRleC5jZ2k/YXV0aF90eXBlPUxvY2FsJmV0PTEzNTI1MjA0NjEmbG9jYWxlPWRlX0RFJnBhc3N3 b3JkPTRiMGE3ZjNhMTM2ZTYwYzdjZjczZWMxYjMwZWM2YTIzJgpwcmltYXJ5X3RhYj1VU0VSUyZy ZWFsbT0mc2Vjb25kYXJ5X3RhYj1wZXJfdXNlcl9hZGRfdXBkYXRlJnVzZXI9YmVuamFtaW5LTQoK ClBvQzogQmVudXR6ZXIgPiBOZXUgQW5sZWdlbiA+IFJvbGxlOiBBdWRpdG9yID4gRG9tw6RuZW4g PiAoZG9tYWluX2xpc3RfdGFibGUtcjApCjx0ZCBzdHlsZT0idmVydGljYWwtYWxpZ246bWlkZGxl O3RleHQtYWxpZ246bGVmdDt3aGl0ZS1zcGFjZTpub3dyYXAiPgogJTIwJiM4MjAzOyYjODIwMzsm IzgyMDM7JiM4MjAzOyYjODIwMzsiPiYjODIwMzsmIzgyMDM7JiM4MjAzOyYjODIwMzsmIzgyMDM7 PGlmcmFtZSBzcmM9Imh0dHA6Ly92dWxuLWxhYi5jb20iIG9ubG9hZD0iYWxlcnQoZG9jdW1lbnQu Y29va2llKSIgPD0iIiAKIj0iW1BFUlNJU1RFTlQgSU5KRUNURUQgU0NSSVBUIENPREUhXTwgPC9p ZnJhbWU+PGlucHV0IG5hbWU9InVzZXJfZG9tYWluX2FkbWluOjEiIAppZD0idXNlcl9kb21haW5f YWRtaW46MSIgdmFsdWU9IiJbUEVSU0lTVEVOVCBJTkpFQ1RFRCBTQ1JJUFQgQ09ERSFdIiB0eXBl PSJoaWRkZW4iPjwvdGQ+CgoKUmVmZXJlbmNlKHMpOgpodHRwOi8vYXJjaGl2ZXIucHRlc3QubG9j YWxob3N0OjMzNzgvY2dpLW1vZC9pbmRleC5jZ2kKCmh0dHA6Ly9hcmNoaXZlci5wdGVzdC5sb2Nh bGhvc3Q6MzM3OC9jZ2ktbW9kL2luZGV4LmNnaT9hdXRoX3R5cGU9TG9jYWwmZXQ9MTM1MjUyMDQ2 MSZsb2NhbGU9ZGVfREUmcGFzc3dvcmQ9NGIwYTdmM2ExMzZlNjBjN2NmNzNlYzFiMzBlYzZhMjMm CnByaW1hcnlfdGFiPVVTRVJTJnJlYWxtPSZzZWNvbmRhcnlfdGFiPXBlcl91c2VyX2FkZF91cGRh dGUmdXNlcj1iZW5qYW1pbktNXzBuZQoKCgpTb2x1dGlvbiAtIEZpeCAmIFBhdGNoOgo9PT09PT09 PT09PT09PT09PT09PT09PQpUaGUgdnVsbmVyYWJpbGl0eSBjYW4gYmUgcGF0Y2hlZCBieSBhIHNl Y3VyZSBwYXJzZSBhbmQgZW5jb2RlIG9mIHRoZSB2dWxuZXJhYmxlIGFmZmVjdGVkIGxpc3Rpbmcg aW4gdGhlIGRvbWFpbl9saXN0X3RhYmxlLXIwIHBhcmFtZXRlcihzKS4KCkJhcnJhY3VkYSBOZXR3 b3JrcyBBcHBsaWFuY2U6IEFkdmFuY2VkID5GaXJtd2FyZSBVcGRhdGVzIFBhZ2UKaHR0cHM6Ly93 d3cuYmFycmFjdWRhLmNvbS9zdXBwb3J0L2tub3dsZWRnZWJhc2UvNTAxNjAwMDAwMDEzbFhlCgoK U2VjdXJpdHkgUmlzazoKPT09PT09PT09PT09PT0KVGhlIHNlY3VyaXR5IHJpc2sgb2YgdGhlIGFw cGxpY2F0aW9uLXNpZGUgaW5wdXQgdmFsaWRhdGlvbiB3ZWIgdnVsbmVyYWJpbGl0eSBpcyBlc3Rp bWF0ZWQgYXMgbWVkaXVtLgoKCkNyZWRpdHMgJiBBdXRob3JzOgo9PT09PT09PT09PT09PT09PT0K VnVsbmVyYWJpbGl0eSBMYWJvcmF0b3J5IFtSZXNlYXJjaCBUZWFtXSAgLSBCZW5qYW1pbiBLdW56 IE1lanJpIChia21AZXZvbHV0aW9uLXNlYy5jb20pIFt3d3cudnVsbmVyYWJpbGl0eS1sYWIuY29t XQoKCkRpc2NsYWltZXIgJiBJbmZvcm1hdGlvbjoKPT09PT09PT09PT09PT09PT09PT09PT09PQpU aGUgaW5mb3JtYXRpb24gcHJvdmlkZWQgaW4gdGhpcyBhZHZpc29yeSBpcyBwcm92aWRlZCBhcyBp dCBpcyB3aXRob3V0IGFueSB3YXJyYW50eS4gVnVsbmVyYWJpbGl0eSBMYWIgZGlzY2xhaW1zIGFs bCB3YXJyYW50aWVzLCBlaXRoZXIgCmV4cHJlc3NlZCBvciBpbXBsaWVkLCBpbmNsdWRpbmcgdGhl IHdhcnJhbnRpZXMgb2YgbWVyY2hhbnRhYmlsaXR5IGFuZCBjYXBhYmlsaXR5IGZvciBhIHBhcnRp Y3VsYXIgcHVycG9zZS4gVnVsbmVyYWJpbGl0eS1MYWIgb3IgaXRzIHN1cHBsaWVycyAKYXJlIG5v dCBsaWFibGUgaW4gYW55IGNhc2Ugb2YgZGFtYWdlLCBpbmNsdWRpbmcgZGlyZWN0LCBpbmRpcmVj dCwgaW5jaWRlbnRhbCwgY29uc2VxdWVudGlhbCBsb3NzIG9mIGJ1c2luZXNzIHByb2ZpdHMgb3Ig c3BlY2lhbCBkYW1hZ2VzLCBldmVuIAppZiBWdWxuZXJhYmlsaXR5LUxhYiBvciBpdHMgc3VwcGxp ZXJzIGhhdmUgYmVlbiBhZHZpc2VkIG9mIHRoZSBwb3NzaWJpbGl0eSBvZiBzdWNoIGRhbWFnZXMu IFNvbWUgc3RhdGVzIGRvIG5vdCBhbGxvdyB0aGUgZXhjbHVzaW9uIG9yIGxpbWl0YXRpb24gCm9m IGxpYWJpbGl0eSBmb3IgY29uc2VxdWVudGlhbCBvciBpbmNpZGVudGFsIGRhbWFnZXMgc28gdGhl IGZvcmVnb2luZyBsaW1pdGF0aW9uIG1heSBub3QgYXBwbHkuIFdlIGRvIG5vdCBhcHByb3ZlIG9y IGVuY291cmFnZSBhbnlib2R5IHRvIGJyZWFrIAphbnkgdmVuZG9yIGxpY2Vuc2VzLCBwb2xpY2ll cywgZGVmYWNlIHdlYnNpdGVzLCBoYWNrIGludG8gZGF0YWJhc2VzIG9yIHRyYWRlIHdpdGggZnJh dWQvc3RvbGVuIG1hdGVyaWFsLgoKRG9tYWluczogICAgd3d3LnZ1bG5lcmFiaWxpdHktbGFiLmNv bSAgIAktIHd3dy52dWxuLWxhYi5jb20JCQkgICAgICAgCQktIHd3dy5ldm9sdXRpb24tc2VjLmNv bQpDb250YWN0OiAgICBhZG1pbkB2dWxuZXJhYmlsaXR5LWxhYi5jb20gCS0gcmVzZWFyY2hAdnVs bmVyYWJpbGl0eS1sYWIuY29tIAkgICAgICAgCQktIGFkbWluQGV2b2x1dGlvbi1zZWMuY29tClNl Y3Rpb246ICAgIGRldi52dWxuZXJhYmlsaXR5LWRiLmNvbQkgCS0gZm9ydW0udnVsbmVyYWJpbGl0 eS1kYi5jb20gCQkgICAgICAgCQktIG1hZ2F6aW5lLnZ1bG5lcmFiaWxpdHktZGIuY29tClNvY2lh bDoJICAgIHR3aXR0ZXIuY29tLyMhL3Z1bG5fbGFiIAkJLSBmYWNlYm9vay5jb20vVnVsbmVyYWJp bGl0eUxhYiAJICAgICAgIAkJLSB5b3V0dWJlLmNvbS91c2VyL3Z1bG5lcmFiaWxpdHkwbGFiCkZl ZWRzOgkgICAgdnVsbmVyYWJpbGl0eS1sYWIuY29tL3Jzcy9yc3MucGhwCS0gdnVsbmVyYWJpbGl0 eS1sYWIuY29tL3Jzcy9yc3NfdXBjb21pbmcucGhwICAgCQktIHZ1bG5lcmFiaWxpdHktbGFiLmNv bS9yc3MvcnNzX25ld3MucGhwClByb2dyYW1zOiAgIHZ1bG5lcmFiaWxpdHktbGFiLmNvbS9zdWJt aXQucGhwICAJLSB2dWxuZXJhYmlsaXR5LWxhYi5jb20vbGlzdC1vZi1idWctYm91bnR5LXByb2dy YW1zLnBocAktIHZ1bG5lcmFiaWxpdHktbGFiLmNvbS9yZWdpc3Rlci8KCkFueSBtb2RpZmllZCBj b3B5IG9yIHJlcHJvZHVjdGlvbiwgaW5jbHVkaW5nIHBhcnRpYWxseSB1c2FnZXMsIG9mIHRoaXMg ZmlsZSByZXF1aXJlcyBhdXRob3JpemF0aW9uIGZyb20gVnVsbmVyYWJpbGl0eSBMYWJvcmF0b3J5 LiBQZXJtaXNzaW9uIHRvIAplbGVjdHJvbmljYWxseSByZWRpc3RyaWJ1dGUgdGhpcyBhbGVydCBp biBpdHMgdW5tb2RpZmllZCBmb3JtIGlzIGdyYW50ZWQuIEFsbCBvdGhlciByaWdodHMsIGluY2x1 ZGluZyB0aGUgdXNlIG9mIG90aGVyIG1lZGlhLCBhcmUgcmVzZXJ2ZWQgYnkgClZ1bG5lcmFiaWxp dHktTGFiIFJlc2VhcmNoIFRlYW0gb3IgaXRzIHN1cHBsaWVycy4gQWxsIHBpY3R1cmVzLCB0ZXh0 cywgYWR2aXNvcmllcywgc291cmNlIGNvZGUsIHZpZGVvcyBhbmQgb3RoZXIgaW5mb3JtYXRpb24g b24gdGhpcyB3ZWJzaXRlIAppcyB0cmFkZW1hcmsgb2YgdnVsbmVyYWJpbGl0eS1sYWIgdGVhbSAm IHRoZSBzcGVjaWZpYyBhdXRob3JzIG9yIG1hbmFnZXJzLiBUbyByZWNvcmQsIGxpc3QgKGZlZWQp LCBtb2RpZnksIHVzZSBvciBlZGl0IG91ciBtYXRlcmlhbCBjb250YWN0IAooYWRtaW5AdnVsbmVy YWJpbGl0eS1sYWIuY29tIG9yIHJlc2VhcmNoQHZ1bG5lcmFiaWxpdHktbGFiLmNvbSkgdG8gZ2V0 IGEgcGVybWlzc2lvbi4KCgkJCQlDb3B5cmlnaHQgwqkgMjAxNCB8IFZ1bG5lcmFiaWxpdHkgTGFi b3JhdG9yeSBbRXZvbHV0aW9uIFNlY3VyaXR5XQoKCgotLSAKVlVMTkVSQUJJTElUWSBMQUJPUkFU T1JZIFJFU0VBUkNIIFRFQU0KRE9NQUlOOiB3d3cudnVsbmVyYWJpbGl0eS1sYWIuY29tCkNPTlRB Q1Q6IHJlc2VhcmNoQHZ1bG5lcmFiaWxpdHktbGFiLmNvbQoKCgpfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXwpTZW50IHRocm91Z2ggdGhlIEZ1bGwgRGlzY2xv c3VyZSBtYWlsaW5nIGxpc3QKaHR0cDovL25tYXAub3JnL21haWxtYW4vbGlzdGluZm8vZnVsbGRp c2Nsb3N1cmUKV2ViIEFyY2hpdmVzICYgUlNTOiBodHRwOi8vc2VjbGlzdHMub3JnL2Z1bGxkaXNj bG9zdXJlLw==