SecurityFocus Linux Newsletter #78

John Boletta <[email protected]> Mon, 29 Apr 2002 11:10:33 -0600 (MDT)

Newsgroups	gmane.comp.security.news.linux
Message-ID	<[email protected]>

SecurityFocus Linux Newsletter #78
--------------------------------

This Issue is Sponsored by: Guardian Digital, Inc.

===> Build Complete Internet Presence Quickly and Securely!

EnGarde Secure Linux has everything necessary to create thousands of
virtual Web sites, manage e-mail, DNS, firewalling, and database functions
for an entire organization, all using a secure Web-based front-end.
Engineered to be secure and easy to use!

Don't jeopardize your organization with an off-the shelf Linux!

Click here to find out how to build a secure Internet presence.
http://www.guardiandigital.com/promo/sf150402.html

-------------------------------------------------------------------------------

I. FRONT AND CENTER
1. Securing Privacy, Part Two: Software Issues
2. Dollar Diddling and the Billion-Dollar Viruses
3. Teaching the Rules of the Road
II. LINUX VULNERABILITY SUMMARY
1. Ikonboard Message Body Cross Agent Scripting Vulnerability
2. PHP-Survey Global.INC Information Disclosure Vulnerability
3. vqServer CGI Demo Program Script Injection Vulnerability
4. Philip Chinery's Guestbook Script Injection Vulnerability
5. SLRNPull Spool Directory Command Line Parameter Buffer...
6. GNU Screen Braille Module Buffer Overflow Vulnerability
7. Sudo Password Prompt Heap Overflow Vulnerability
8. PHPProjekt Login Bypass Vulnerability
9. PHPProjekt SQL Injection Vulnerability
10. Ultimate PHP Board Encrypted Password Disclosure Vulnerability
11. Ultimate PHP Board Image Tag Script Injection Vulnerability
12. PsyBNC Oversized Passwords Denial Of Service Vulnerability
13. Apache Tomcat Servlet Path Disclosure Vulnerability
14. Mosix ClumpOS Blank Default VNC Password Vulnerability
15. Mosix Malformed Packet Handling Denial Of Service Vulnerability
16. PHP posix_getpwnam / posix_getpwuid safe_mode Circumvention...
17. KTH eBones Kerberos4 FTP Client Passive Mode Heap Overflow...
18. PHPProjekt File Read Vulnerability
19. PHPProjekt Unauthorized Script Access Vulnerability
20. Ultimate PHP Board Private Message Disclosure Vulnerability
21. ACME Labs thttpd Cross-Site Scripting Vulnerability
III. LINUX FOCUS LIST SUMMARY
1. No Root Shell with SUID /bin/bash (Thread)
2. Adore over adore? (Thread)
3. Adore over adore? (Thread)
IV. NEW PRODUCTS FOR LINUX PLATFORMS
1. NetSecure Web
2. EncrLib ECC Cryptographic Library
3. SafePipe 1000 Series
V. NEW TOOLS FOR LINUX PLATFORMS
1. GreedyDog v2.3
2. EGADS v0.9
3. DSCMD - DataSAFE Command Line Encryptor v2.0
4. LEAF(bering) v1.0-rc2 2.4.18
VI. SPONSORSHIP INFORMATION

I. FRONT AND CENTER
-------------------
1. Securing Privacy, Part Two: Software Issues
By Scott Granneman

This is the second article in a three-part series that will examine
privacy concerns as they relate to security. This installment will discuss
software-based issues and solutions. As we shall see, some software is
designed to safeguard privacy, while other software seems designed to
compromise it. ...

http://online.securityfocus.com/infocus/1573

2. Dollar Diddling and the Billion-Dollar Viruses
By George Smith

How journalists tap "experts" to reach absurd conclusions about the cost
of computer viruses.

http://online.securityfocus.com/columnists/78

3. Teaching the Rules of the Road
By Jon Lasser

There's a big, seemingly unassailable, problem with computer security
today. It's a people problem, not a technology problem.

http://online.securityfocus.com/columnists/77

II. BUGTRAQ SUMMARY
-------------------
1. Ikonboard Message Body Cross Agent Scripting Vulnerability
BugTraq ID: 4591
Remote: Yes
Date Published: Apr 24 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4591
Summary:

Ikonboard is a web based bulletin board package implemented in Perl. It
may be installed under Linux, Windows, or many Unix platforms.

A cross agent scripting problem has been reported in some versions of
Ikonboard. Allegedly, it is possible to directly include JavaScript code
into the bodies of messages posted on Ikonboard. When the message is
viewed by another user of the system, the script code will execute within
the context of the Ikonboard site.

Exploitation of this vulnerability allows malicious script code to execute
within a trusted context. It may be possible to subvert the content of the
Ikonboard system, take actions as the authenticated user, or steal
authentication information.

This issue has been reported to exist in version 2.1.9 of Ikonboard. It
may impact other versions of Ikonboard, although the problem has not yet
been confirmed. This issue is believed to require HTML support be enabled
on the Ikonboard system.

2. PHP-Survey Global.INC Information Disclosure Vulnerability
BugTraq ID: 4612
Remote: Yes
Date Published: Apr 26 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4612
Summary:

PHP-Survey is a web-based survey engine. It is written in PHP and will
run on most Unix and Linux variants. It is back-ended by a MySQL
database.

PHP-Survey comes with a script entitled 'global.inc', which contains
configuration information such as the name of the local host, database
credentials, and credentials for the survey administrator. This file is
not interpreted as a PHP script if requested via HTTP, allowing remote
attackers to trivially gain access to the sensitive information contained
in 'global.inc'.

3. vqServer CGI Demo Program Script Injection Vulnerability
BugTraq ID: 4573
Remote: Yes
Date Published: Apr 21 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4573
Summary:

vqServer is a HTTP server implemented in Java. vqServer is available on
any architecture supporting Java, including Linux and Microsoft Windows.

vqServer supports a variety of CGI mechanisms, including Perl scripts,
executables and servlets. vqServer includes a number of demonstration
programs for these methods.

Issues have been reported with multiple scripts included with vqServer.
Reportedly, it is possible to inject JavaScript code through these
programs. In addition to cross site scripting issues, it has been reported
possible to inject script code into cookie content.

Exploitation of these sample programs may allow an attacker to execute
script code in the context of the page hosted with vqServer.

4. Philip Chinery's Guestbook Script Injection Vulnerability
BugTraq ID: 4566
Remote: Yes
Date Published: Apr 21 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4566
Summary:

Philip Chinery's Guestbook is freely available guestbook software. It
will run on most Unix and Linux variants, as well as Microsoft Windows
operating systems.

Philip Chinery's Guestbook does not filter HTML tags from form fields.
As a result, it is possible for an attacker to inject script code into
pages that are generated by the guestbook. Additionally, script code is
not filitered from URL parameters, making the guestbook prone to
cross-site scripting attacks.

In both instances, it is possible for an attacker to cause arbitrary
script code to be executed in the browser of a web user, in the security
context of the website running the vulnerable guestbook.

This may allow the attacker to hijack web content or potentially steal
cookie-based authentication credentials.

This issue has been reported for Philip Chinery's Guestbook version 1.1.
Other versions may also be affected.

5. SLRNPull Spool Directory Command Line Parameter Buffer Overflow Vulnerability
BugTraq ID: 4569
Remote: No
Date Published: Apr 22 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4569
Summary:

SLRN is a freely available, open source news reading utility. It is
developed and maintained by the SLRN project, and designed for use on
various operating systems. This problem affects the UNIX and Linux
implementation.

It may be possible for a local user to gain elevated privileges. The
problem is in the handling of long directory spool names.

Due to a boundary condition error, a buffer overflow condition exists in
spool directory names. This problem affects the slrnpull program,
included as part of the slrn package. When slrnpull is executed with the
-d flag, and a file name of greater than 4091 bytes, the overflow makes it
possible to overwrite process memory, including the return address.

While the default installation of slrnpull is as a non-privileged user
from source, some operating systems include slrnpull as a setuid or setgid
executable. In including the program with these privileges, a local user
could exploit this overflow to execute user-supplied instructions, and
gain elevated privileges.

6. GNU Screen Braille Module Buffer Overflow Vulnerability
BugTraq ID: 4578
Remote: No
Date Published: Apr 23 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4578
Summary:

Screen is a freely available, open source terminal management software
package. It is distributed and maintained by the Free Software
Foundation. It is available for the Unix and Linux platforms.

A problem with screen may allow a local user to gain elevated privileges.
The problem is in the handling of long strings of input.

Under some circumstances, it may be possible for a local user to take
advantage of a buffer overflow in screen. Due to insufficient bounds
checking performed by the braille module of screen, it is possible for a
local user to pass long strings of data to the screen program, which could
result in an overflow, and the overwriting of process memory. This could
result in the execution of arbitrary code.

As the screen program is typically installed setuid root, any
user-supplied code would be executed as root. This problem may be
exploited by the attacker placing the exploit code in a screenrc file, and
loading the file with the -c flag of screen. This problem may also affect
earlier versions of the software.

7. Sudo Password Prompt Heap Overflow Vulnerability
BugTraq ID: 4593
Remote: No
Date Published: Apr 25 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4593
Summary:

Sudo is a widely used Linux/Unix utility that allow users to securely run
commands as other users. Sudo is vulnerable to a heap overflow condition
related to it's customizable password prompt feature.

Sudo allows for users to have sudo generate a custom password prompt.
This prompt is supplied to sudo as an argument to the '-p' command-line
option. Symbols for the system hostname and the username, '%h' and '%u',
can be placed in the prompt. They will be expanded to their actual values
when the prompt is output.

When the string is constructed for output, memory is allocated to store it
using malloc(). Sudo suffers from a subtle flaw in calculating the amount
of memory required for a prompt that contains expanded hostname and
username tokens. Under some conditions, less memory may be allocated than
is actually required. If this occurs, the fully expanded prompt will be
written beyond the end of the allocated buffer. This may result in
exploitable conditions, depending on the implementation of malloc().
Linux is confirmed vulnerable.

It is required that sudo be installed setuid root. Successful
exploitation may allow for local attackers to gain root privileges.

8. PHPProjekt Login Bypass Vulnerability
BugTraq ID: 4596
Remote: Yes
Date Published: Apr 25 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4596
Summary:

PHPProjekt is a freely available, open source PHP Groupware package. It is
actively maintained by the PHPProjekt Development Team. It will run on
most Linux and Unix variants, in addition to Microsoft Windows operating
systems.

Some of the PHPProjekt scripts are only intended to be accessed by users
who have been authenticated. However, it has been reported that it is
possible for an unauthenticated attacker to access these scripts via a
specially crafted web request.

To validate that an authenticated user is accessing a script, the
$PHP_SELF variable is checked for the presence of certain strings(such as
'sms'). The $PHP_SELF variable is derived from the PATH_INFO variable.
It is trivial for an attacker to craft a web request which contains the
strings that PHPProjekt is looking for. This will enable the attacker to
access the PHPProjekt scripts that ordinarily may only be accessed by an
authenticated user.

9. PHPProjekt SQL Injection Vulnerability
BugTraq ID: 4598
Remote: Yes
Date Published: Apr 25 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4598
Summary:

PHPProjekt does not properly sanitize user-supplied data before it is
passed into SQL queries. This occurs in a number of places throughout
PHPProjekt. This makes it possible for attackers to launch SQL injection
attacks. For example, an attacker may be able to modify the logic of an
existing SQL query.

Exploitation of this issue may cause sensitive information contained in
the database to be disclosed. The attacker may also potentially modify
data. It is also possible that this issue may be leveraged to exploit
existing vulnerabilities in the underlying database.

10. Ultimate PHP Board Encrypted Password Disclosure Vulnerability
BugTraq ID: 4602
Remote: Yes
Date Published: Apr 25 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4602
Summary:

Ultimate PHP Board (UPB) is web forum software. It will run on most Unix
and Linux variants, as well as Microsoft Windows operating systems.

Encrypted UPB user passwords are included in files which may be accessible
to a malicious user. Encrypted user passwords are stored by UPB under the
user ID of each registered member. The user files have an extension of
".xbb". A malicious user may make a web request for the file containing
the encrypted password of a particular user.

The malicious user may construct a cookie using the encrypted password of
a registered UPB user and gain access to their account. UPB cookie data
is constructed using the following format:

ID + 'þ' + 'Xb' + 'encrypted user password'

For example, the cookie data for user ID 5 with an encrypted password of
'OhJmLwt' would be:

'5þXbOhJmLwt'

11. Ultimate PHP Board Image Tag Script Injection Vulnerability
BugTraq ID: 4603
Remote: Yes
Date Published: Apr 25 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4603
Summary:

Ultimate PHP Board (UPB) is web forum software. It will run on most Unix
and Linux variants, as well as Microsoft Windows operating systems.

Ultimate PHP Board including a feature called UPB-Code, which allows users
to control the format of their messages using special formatting tags.
The [IMG] tag allows users to embed images inside of forum messages.

UPB does not filter HTML from image tags. This may allow an attacker to
inject arbitrary script code in forum messages. Injected script code will
be executed in the browser of an arbitrary web user who views the
malicious forum message, in the context of the website running UPB.

This may be potentially be exploited to hijack web content or steal
cookie-based authentication credentials from legitimate users.

It may be possible to inject script code into other UPB-Code formatting
tags, though this has not been confirmed.

12. PsyBNC Oversized Passwords Denial Of Service Vulnerability
BugTraq ID: 4570
Remote: Yes
Date Published: Apr 22 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4570
Summary:

PsyBNC is a freely available, open source IRC bouncing server. It is
available for the UNIX and Linux operating systems.

A problem with PsyBNC could lead to a denial of service. The problem is
in the handling of long PsyBNC passwords.

Under some circumstances, it is possible for a remote user to crash a
vulnerable server. Upon connection to a vulnerable system, if a user
sends a password of 9000 or more characters, and disconnects from the
system, the server process does not die. Instead, the process continues
to live and consume a large amount of resources.

This vulnerability could result in a user launching several connection
attempts, sending long passwords to the PsyBNC server, and tying up large
amounts of system resources. This could result in crash of the PsyBNC
server process, and potentially the server hosting the PsyBNC.

13. Apache Tomcat Servlet Path Disclosure Vulnerability
BugTraq ID: 4575
Remote: Yes
Date Published: Apr 23 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4575
Summary:

Apache Tomcat is a servlet container for use with the Java Servlet and
JavaServer Pages technologies. Tomcat may be run on most Unix and Linux
variants as well as Microsoft Windows operating systems.

A problem in the default installation of Apache Tomcat may cause sensitive
information to be disclosed to remote attackers.

Apache Tomcat ships with a number of example classes (SnoopServlet and
TroubleShooter) which may reveal the absolute path of the Tomcat
installation when requested via HTTP. These classes are included to serve
as an example for developers and are not intended to be used in production
environments.

This information will give the attacker an idea of the layout of the
filesystem on the host running Apache Tomcat. Disclosure of this type of
sensitive information may aid in further attacks against the host running
the vulnerable software.

14. Mosix ClumpOS Blank Default VNC Password Vulnerability
BugTraq ID: 4581
Remote: Yes
Date Published: Apr 23 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4581
Summary:

ClumpOS is a cd-based Linux and Mosix distribution. It is maintained and
distributed by the Mosix project.

A problem with ClumpOS could allow unauthorized administrative access to a
vulnerable system. The problem is the setting of passwords.

ClumpOS does not prompt a user to set a password for VNC when installed.
Instead, ClumpOS leaves the default password for VNC blank. This could
allow remote root access to the system.

15. Mosix Malformed Packet Handling Denial Of Service Vulnerability
BugTraq ID: 4580
Remote: Yes
Date Published: Apr 23 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4580
Summary:

Mosix is a parallel processing software package. It is designed for use
on the Linux operating system.

A problem with Mosix could lead to a user denying service to cluster
processes. The problem is in the handling of malformed packets.

It has been reported that Mosix does not properly handle certain
maliciously constructed packets. When these malformed packets are
received by Mosix, it may react unpredictably, or become unstable. The
precise nature of the crash-inducing packets is not known.

This vulnerability also reportedly affects Open-Mosix.

Successful exploitation may cause a failure of the process, resulting in a
denial of service.

16. PHP posix_getpwnam / posix_getpwuid safe_mode Circumvention Vulnerability
BugTraq ID: 4606
Remote: No
Date Published: Apr 23 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4606
Summary:

PHP is a server side scripting language, designed to be embedded within
HTML files. It is available for Windows, Linux, and many Unix based
operating systems. It is commonly used for web development, and is very
widely deployed.

PHP supports the safe_mode and open_basedir configuration directives,
designed to prevent script code from accessing sensitive functionality and
files. PHP also supports the functions posix_getpwnam and posix_getpwuid,
which will retrive local user information based on either a username or
uid.

These functions are not impacted by the safe_mode directive. A malicious
script operating under safe_mode may use these functions to discover
sensitive system information, including a brute force search for users
based on uid.

17. KTH eBones Kerberos4 FTP Client Passive Mode Heap Overflow Vulnerability
BugTraq ID: 4592
Remote: Yes
Date Published: Apr 24 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4592
Summary:

This problem affects the ftp client source included with the Kerberos4
eBones implementation maintained and distributed by KTH. It is freely
available. This vulnerability affects only Unix and Linux operating
systems.

Inadequate bounds checking on processing of server responses by the client
may result in a heap overflow.

Under some circumstances, it may be possible to take advantage of a heap
overflow in the KTH eBones ftp client. Due to insufficient bounds
checking, an overflow could occurs when the client enters passive mode.
An excessively long server address response sent from a server to a client
entering passive mode could trigger this overflow.

This problem could result in the arbitrary execution of code on a
vulnerable host. The code would be executed with the permissions of the
ftp client user. In some cases, this could result in an attacker being
able to gain an unprivileged shell. In a worst-case scenario, the ftp
user is root, and thus execution of code as root could result.

18. PHPProjekt File Read Vulnerability
BugTraq ID: 4597
Remote: Yes
Date Published: Apr 25 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4597
Summary:

It has been reported that an attacker may trick the PHPProjekt upload
functions into reading local files on the host running the vulnerable
software.

PHPProjekt does not validate that the variables associated with the upload
functions were set by a file upload. It is possible for an attacker to
set arbitrary values for the upload related variables using normal POST
data.

This may be exploited by the attacker to display the contents of arbitrary
web-readable files.

19. PHPProjekt Unauthorized Script Access Vulnerability
BugTraq ID: 4599
Remote: Yes
Date Published: Apr 25 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4599
Summary:

Some of the PHPProjekt scripts are only intended to be accessed by users
who have been authenticated. Attackers may submit data using the HTTP
POST method to view or edit data contained in scripts that normally
require authentication to be accessed. Data submitted in this manner must
be properly formatted.

This is due to insufficient validation of the source of data that is
submitted to PHPProjekt.

20. Ultimate PHP Board Private Message Disclosure Vulnerability
BugTraq ID: 4600
Remote: Yes
Date Published: Apr 25 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4600
Summary:

Ultimate PHP Board (UPB) is web forum software. It will run on most Unix
and Linux variants, as well as Microsoft Windows operating systems.

UPB includes a private messaging system. Private messages are stored by
UPB under the user ID of each registered member. Private message files
have an extension of ".pm". UPB does not sufficiently validate which user
is attempting to access a given private message file. As a result,
malicious users may request the private message file of a particular user
and read that user's private messages.

Information gathered in this manner may aid the attacker in making social
engineering attacks against UPB users.

21. ACME Labs thttpd Cross-Site Scripting Vulnerability
BugTraq ID: 4601
Remote: Yes
Date Published: Apr 25 2002 12:00A
Relevant URL:
http://www.securityfocus.com/bid/4601
Summary:

thttpd is a web server product maintained by ACME Labs. thttpd has been
compiled for Linux, BSD and Solaris, as well as other Unix like operating
systems.

It is possible for attackers to construct urls that will cause scripting
code to be embedded in error pages.

thttpd fails to check URLs for the presence of script commands when
generating error pages, allowing attacker supplied code to execute. As a
result, when an innocent user follows such a link, the script code will
execute within the context of the hosted site.

Successful exploitation of this vulnerability could enable an attacker to
execute code in the security context of a trusted site. In addition, this
issue could allow an attacker to access the trusted site's cookies,
possibly aiding in other web-based attacks.

It should be noted that this issue was tested on 2.20b, other versions may
also be affected by this issue.

III. LINUX FOCUS LIST SUMMARY
---------------------------------
1. No Root Shell with SUID /bin/bash (Thread)
Relevant URL:

http://online.securityfocus.com/archive/91/[email protected]

2. Adore over adore? (Thread)
Relevant URL:

http://online.securityfocus.com/archive/91/8A87A19E6153D4119FA800508BDF093207F9E366@USHEM202

3. Adore over adore? (Thread)
Relevant URL:

http://online.securityfocus.com/archive/91/[email protected]

IV.NEW PRODUCTS FOR LINUX PLATFORMS
-----------------------------------
1. NetSecure Web
by NetSecure Software
Platforms: AIX, BSDI, Linux, Solaris, Windows NT
Relevant URL:
http://www.netsecuresoftware.com/netsecurenew/Products/NetSecureWeb/netsecureweb.html
Summary:

NetSecure Web enables you to create Internet services guaranteeing full
protection of your information system network. * Total access to internal
database server * Fully transparent for internal and external users *
Preserves your private network from intrusion * Ensures that only
authorized requests are delivered * Easy installation and operation

2. EncrLib ECC Cryptographic Library
by Encryption Software
Platforms: Linux, UNIX, Windows 2000, Windows 95/98, Windows NT
Relevant URL:
http://www.encrsoft.com/products/encrlib.html
Summary:

EncrLib ECC Cryptographic Library is a C++, secure, powerful, portable,
easy-to-use, and extremely fast public-key encryption and digital
signature solution, based on the most exciting public-key development in
the cryptographic community of the last decade -- Elliptic Curve
Cryptography (ECC).

3. SafePipe 1000 Series
by Eicon Networks
Platforms: Linux
Relevant URL:
http://www.eicon.com/worldwide/products/VPN/safepipe1000.htm
Summary:

Safepipe 1000 Series is the ideal solution for small enterprises and
branch offices of larger companies that require high performance,
security, and stability at low cost.

V. NEW TOOLS FOR LINUX PLATFORMS
--------------------------------
1. GreedyDog v2.3
by UNYUN, [email protected]
Relevant URL:
http://www.shadowpenguin.org/sc_toolbox/unix/gdd
Platforms: FreeBSD, IRIX, Linux, Solaris, SunOS
Summary:

This program is one of the ethernet packet sniffers for LINUX, FreeBSD,
SunOS4.1, Solaris2, and IRIX that can log the all packets in each session
of telnet, rlogin, pop3, and ftp. If you install this program in the
cracked server, you can also know the cracking process and the location of
rootshell by the crackers. The logs of this tool is the evidence of the
cracking, this tool is also useful for administrators.

2. EGADS v0.9
by Secure Software Solutions
Relevant URL:
http://www.securesw.com/egads/
Platforms: UNIX, Windows 2000
Summary:

EGADS is a system service and library for providing secure random numbers.
It contains an implementation of the Tiny pseudo-random number generator
and the Tiny entropy gateway. Tiny is an evolution of Yarrow, and was
designed by John Kelsey (an original designer of Yarrow) and John Viega.
We are currently preparing a white paper on the Tiny algorithm.

EGADS provides the same kind of functionality as /dev/random and
/dev/urandom on Linux systems, but works on Windows, and as a portable
Unix program.

EGADS is available as a portable user-level daemon for Unix systems, and
as a service for Windows 2000 machines. An XP-compatible version will be
available shortly.

3. DSCMD - DataSAFE Command Line Encryptor v2.0
by Regnoc Software
Relevant URL:
http://www.regnoc.com
Platforms: Linux, Windows 2000, Windows 95/98, Windows NT, Windows XP
Summary:

DSCMD allows you to encrypt source files for secure storage, transmission
via the Internet, and e-mail attachments. Only someone who knows the
eight-character locking combination can recover the contents of the
encrypted file. DSCMD is completely command-line driven, and simple to
integrate into your programs and scripts on both Windows NT and Linux
servers.

4. LEAF(bering) v1.0-rc2 2.4.18
by LEAF Project Developers [email protected]
Relevant URL:
http://download.sourceforge.net/leaf/
Platforms: Linux
Summary:

LEAF (Linux Embedded Appliance Firewall) is an easy-to-use embedded Linux
system that is meant for creating network appliances for use in small
office, home office, and home automation environments. Although it can be
used in other ways, it is primarily used as a gateway/router/firewall for
Internet leaf sites.

VI. SPONSORSHIP INFORMATION
---------------------------
This Issue is Sponsored by: Guardian Digital, Inc.

===> Build Complete Internet Presence Quickly and Securely!

Don't jeopardize your organization with an off-the shelf Linux!

Click here to find out how to build a secure Internet presence.
http://www.guardiandigital.com/promo/sf150402.html

-------------------------------------------------------------------------------