SecurityFocus Linux Newsletter #163

SecurityFocus Linux Newsletter #163
------------------------------------

SecurityFocus.com would like to take this opportunity to express our
gratitude for your continued support. In the upcoming year we will improve
and grow so we can continue to provide you with all your essential
security resources.
We would also like to wish you all a great Holiday Season, and a
prosperous New Year.

-The staff at SecurityFocus.com
------------------------------------------------------------------------

I. FRONT AND CENTER
     1. Nessus, Part 2: Scanning
     2. Securing Apache: Step-by-Step
     3. Low-Level Enumeration With TCP/IP
II. LINUX VULNERABILITY SUMMARY
     1. Multiple Vendor IKE Implementation Certificate Authenticity ...
     2. Multiple Vendor IKE Insecure XAUTH Implementation Vulnerabil...
     3. lftp Try_Netscape_Proxy Buffer Overflow Vulnerability
     4. lftp Try_Squid_Eplf Buffer Overflow Vulnerability
     5. X-Chat Remote Denial of Service Vulnerability
     6. MVDSV Quake Server Download Buffer Overrun Vulnerability
     7. W-Agora Multiple Remote Vulnerabilities
     8. Cyrus IMSP Daemon Remote Buffer Overflow Vulnerability
     9. Invision Power Board Index.PHP SQL Injection Vulnerability
     10. GoAhead Webserver ASP Script File Source Code Disclosure Vul...
     11. Botan Es_Unix Privilege Escalation Vulnerability
III. LINUX FOCUS LIST SUMMARY
     1. UNIX Authentication (Thread)
     2. Static ARP table in Linux (Thread)
IV. NEW PRODUCTS FOR LINUX PLATFORMS
     1. Immunity CANVAS
     2. SecretAgent
     3. Cyber-Ark  Inter-Business Vault
     4. EnCase Forensic Edition
     5. KeyGhost SX
     6. SafeKit
V. NEW TOOLS FOR LINUX PLATFORMS
     1. Stealth HTTP Security Scanner v2.0b47
     2. pmacct v0.5.4
     3. nload  v0.6.0
     4. pam_usb v0.2-rc2
     5. Fast Logging Project for Snort v1.0.6
     6. GKrellM v2.1.23 (GTK 2.0)
VI. UNSUBSCRIBE INSTRUCTIONS
VII. SPONSOR INFORMATION


I. FRONT AND CENTER
-------------------
1. Nessus, Part 2: Scanning
By Harry Anderson

This article, the second in the series, provides direction through the
scanning process with Nessus, a powerful open source vulnerability
scanner.

http://www.securityfocus.com/infocus/1753

2. Securing Apache: Step-by-Step
By Artur Maj
Published May 14, 2003

This article shows in a step-by-step fashion, how to install and configure
the Apache 1.3.x Web server in order to mitigate or avoid successful
break-in when new vulnerabilities in this software are found.

http://www.securityfocus.com/infocus/1694

3. Low-Level Enumeration With TCP/IP
by Randy Williams (Guest Feature)

This paper explains the theory and concept behind many of today's advanced
scanning techniques, shows you what is going on behind the scenes.

http://www.securityfocus.com/guest/24226


II. LINUX VULNERABILITY SUMMARY
-------------------------------
1. Multiple Vendor IKE Implementation Certificate Authenticity ...
BugTraq ID: 9208
Remote: Yes
Date Published: Dec 12 2003
Relevant URL: http://www.securityfocus.com/bid/9208
Summary:
IKE is the Internet Key Exchange protocol. It is used for the negotiation
of authentication and encryption methods and keys during VPN session
initiation.

It has been reported that some default IKE implementations may carry out
insufficient certificate authenticity verification.

The vulnerability lies in the fact that some implementations fail to
thoroughly verify the authenticity of client/server certificates.
Specifically, a client or server will verify the authenticity of a
certificate by ensuring that the Certificate Authority (CA) that signed
it, is the same CA that signed their own certificate. No attempt is made
to verify that the owner of the certificate is trusted.

Exploitation of this issue may be carried out in a number of ways,
depending on the specific IKE implementations. An attacker may impersonate
a client and transmit a certificate subsequent to an IKE and
authentication session being established between the legitimate client and
server. If this were to occur, the impersonated clients certificate would
be erroneously trusted, and IKE would be renegotiated with the attacker,
potentially granting an attacker access to the entire session. The
attacker may also carry out a man-in-the-middle attack by impersonating a
server and initiating an IKE session with a client. Other attacks are also
possible.

It should be noted that the researcher specifically mentioned that certain
vendor VPN clients as being vulnerable, however it was also mentioned that
only some devices/products are vulnerable under some configurations. At
the time of writing, no confirmation has been made by Symantec regarding
which products/devices are directly affected. At this time all vendor VPN
clients have been added as potentially vulnerable. These details will be
modified and/or clarified as further information is made available.

The researcher has explicitly stated that Windows 2000 SP2 and later, as
well as Windows XP are vulnerable to such an implementation. Moreover, it
is said that this implementation may not be modified to allow a differing
CA to sign server and client certificates, potentially making attacks
unavoidable.

The researcher has indirectly stated that the following other vendors may
be affected:  Cisco, Nortel, FreeS\WAN and Certicom. It should be noted
that other vendors/products may be affected as well, and specific products
listed as vulnerable may not be explicitly affected.

2. Multiple Vendor IKE Insecure XAUTH Implementation Vulnerabil...
BugTraq ID: 9209
Remote: Yes
Date Published: Dec 11 2003
Relevant URL: http://www.securityfocus.com/bid/9209
Summary:
IKE is the Internet Key Exchange protocol. It is used for the negotiation
of authentication and encryption methods and keys during VPN session
initiation.

IKE, when implemented with 'XAUTH' extensions, has been reported prone to
sensitive information disclosure.

The vulnerability has been reported to result from a weaknesses in XAUTH
when used as an extension of IKE. For example, when IKE is configured to
use a 'group-password' and then transmit a second authenticator employing
XAUTH. Specifically, the server does not have to be authorized to the
client in an XAUTH based IKE negotiation. This issue may provide for a
circumstance, where an attacker with a malicious IKE server implementing
XAUTH, may be authorized with a client and the client may pass sensitive
data to the malicious server, without suspecting that the malicious server
is not in fact a legitimate server for this transaction.

This could potentially be exploited by an attacker to carry out a session
to a legitimate server, as the client who leaked the sensitive
information. Other attacks would also be possible.

IETF has not recommended the use of XAUTH as an extension of IKE.

It should be noted that the researcher specifically mentioned that certain
vendor VPN clients as being vulnerable, however it was also mentioned that
only some devices/products are vulnerable under specific configurations.

At the time of writing, no confirmation has been made by Symantec
regarding which products/devices are directly affected. At this time all
vendor VPN clients have been added as potentially vulnerable. These
details will be modified and/or clarified, as further information is made
available.

Although specific vendor product versions affected by this issue are not
currently known, the researcher has stated that the following vendors are
or may be affected: Cisco, Nortel, MovianVPN, SafeNet, Certicom, and Funk
AdmitOne. It should be noted that other vendors/products may be affected
as well.

3. lftp Try_Netscape_Proxy Buffer Overflow Vulnerability
BugTraq ID: 9210
Remote: Yes
Date Published: Dec 12 2003
Relevant URL: http://www.securityfocus.com/bid/9210
Summary:
lftp is a command-line file transfer client supporting FTP and HTTP.

It has been reported that the lftp file transfer client is vulnerable to a
remotely exploitable buffer overflow condition.  The vulnerability is
present when lftp is used to retrieve content from a remote HTTP server.
According to the report, the client does not properly handle special
directories that exist on the server.

The error that causes this condition is in the function
"try_netscape_proxy()" of the file "src/HttpDir.cc".  The vulnerability is
reportedly due to an unbounded memory copy of data from the server into an
internal buffer of predefined length. It has been conjectured that the
issue is isolated to an erroneous sscanf() call where a member of a
structure (size_str), is copied into a buffer without sufficient
limitations enforced on the string size by its associated format
specifier. This however has not yet been confirmed.

The flaw is triggered when the user issues the "ls" and "rels" commands.

This vulnerability can be exploited by operators of web servers to execute
arbitrary instructions on the host running lftp.  Any such code executed
would run with the privileges of the user who invoked lftp.

This issue is reported to affect all versions of lftp prior to version
2.6.10.

** This BID, originally entitled "LFTP Undisclosed HTML Parsing
Vulnerability" described an issue that was also covered in BID 9212 "lftp
Buffer Overflow Vulnerabilities".  This BID has been revised with
information from one of the vulnerabilities originally described in BID
9212.  BID 9212 has also been revised to describe the other issue.

4. lftp Try_Squid_Eplf Buffer Overflow Vulnerability
BugTraq ID: 9212
Remote: Yes
Date Published: Dec 15 2003
Relevant URL: http://www.securityfocus.com/bid/9212
Summary:
lftp is a command-line file transfer client supporting FTP and HTTP.

It has been reported that the lftp file transfer client is vulnerable to a
remotely exploitable buffer overflow condition.  The vulnerability is
present when lftp is used to retrieve content from a remote HTTP server.
According to the report, the client does not properly handle special
directories that exist on the server.

The error that causes this condition is in the function "try_squid_eplf()"
of the file "src/HttpDir.cc".  The vulnerability is reportedly due to an
unbounded memory copy of data from the server into an internal buffer of
predefined length. It has been conjectured that the issue is isolated to
an erroneous sscanf() call where a member of a structure (size_str), is
copied into a buffer without sufficient limitations enforced on the string
size by its associated format specifier. This however has not yet been
confirmed.

The flaw is triggered when the user issues the "ls" and "rels" commands.

This vulnerability can be exploited by operators of web servers to execute
arbitrary instructions on the host running lftp.  Any such code executed
would run with the privileges of the user who invoked lftp.

This issue is reported to affect all versions of lftp prior to version
2.6.10.

** This BID, originally entitled "lftp Buffer Overflow Vulnerabilities"
has been divided into two distinct issues.  BID 9210 has also been revised
to cover one of the issues described in the initial version of this BID.

5. X-Chat Remote Denial of Service Vulnerability
BugTraq ID: 9217
Remote: Yes
Date Published: Dec 15 2003
Relevant URL: http://www.securityfocus.com/bid/9217
Summary:
X-Chat is a graphical client for IRC. It requires the GTK+ toolkit, and is
available for many Linux and Unix operating systems.

A vulnerability has been identified in X-Chat that may allow a remote
attacker to cause a denial of service condition in the software.  The
condition is most likely present itself due to insufficient boundary
checks performed on 'DCC SEND' requests.

It has been reported that when received, a malicious 'DDC SEND' request
can trigger a fatal error and cause an affected X-Chat client to crash.
The 'DCC SEND' request may be sent to a channel or a specific targeted
user. Although unconfirmed, due to the nature of this vulnerability it has
been conjectured that a remote attacker may potentially lever this issue
to have arbitrary code executed in the context of the affected X-Chat
client.

X-Chat versions 2.0.5 and 2.0.6 running on a Linux platform have been
reported to be affected by this issue resulting in a crash.  Although
unconfirmed, it is possible that other versions are affected as well.

This issue is similar to mIRC DCC SEND Buffer Overflow Vulnerability (BID
8818).

6. MVDSV Quake Server Download Buffer Overrun Vulnerability
BugTraq ID: 9218
Remote: Yes
Date Published: Dec 15 2003
Relevant URL: http://www.securityfocus.com/bid/9218
Summary:
mvdsv is a Quake Server implementation for Linux.

mvdsv is prone to a remotely exploitable buffer overrun vulnerability.
The vendor has reported that this issue exists in the download function.
Due to insufficient bounds checking in this function, it is possible for
externally supplied data to overrun an internal buffer and corrupt
adjacent regions of memory.  This could permit execution of arbitrary code
in the context of the server.  A denial of service could also result from
exploitation attempts.

7. W-Agora Multiple Remote Vulnerabilities
BugTraq ID: 9226
Remote: Yes
Date Published: Dec 15 2003
Relevant URL: http://www.securityfocus.com/bid/9226
Summary:
W-Agora is a freely available, open source PHP forum software package. It
is available for Unix and Linux systems.

Multiple vulnerabilities have been reported to exist in the software that
include cross-site scripting and remote file include.  These issues result
from insufficient sanitization of user-supplied input.  The problems are
reported to exist in the include/auth.php3, editform.php3, modules.php3,
index.php3, insert.php3, update.php3, and browse.php3 modules.  It has
been reported that some unspecified tags in htaccess could be exploited to
activate certain scripts.

Specific details concerning these issues are not available, however like
other cross-site scripting issues a remote attacker may exploit this
vulnerability to potentially execute HTML or script code in the security
context of the vulnerable site.  The script code would be embedded in a
malicious link.  The problem could potentially be exploited to steal
cookie authentication credentials, or perform other types of attacks.

The file include issue may allow an attacker to include malicious files
containing arbitrary code to be executed on a vulnerable system. The issue
exists due to improper validation of user-supplied data. Remote attackers
could potentially exploit this issue via a vulnerable variable to include
a remote malicious script, which will be executed in the context of the
web server hosting the vulnerable software.

W-Agora version 4.1.5 has been reported to be prone to this issue, however
other versions may be affected as well.

These issues are currently undergoing further analysis. This cumulative
BID will be separated into individual entries when analysis is complete.

8. Cyrus IMSP Daemon Remote Buffer Overflow Vulnerability
BugTraq ID: 9227
Remote: Yes
Date Published: Dec 15 2003
Relevant URL: http://www.securityfocus.com/bid/9227
Summary:
The IMSP Daemon is an implementation of the Internet Message Support
Protocol by the Cyrus project.  It is available for the Unix and Linux
operating systems.

A vulnerability has been identified in the Cyrus IMSP Daemon
implementation when handling certain types of requests.  Because of this,
it may be possible for a remote attacker to gain unauthorized access to a
system using the vulnerable software.

The problem is in exploitable buffer overflow in the IMSP daemon.  The
source of this issue is that an sprintf() operation is performed using
externally supplied data without sufficient bounds checking.  This data
may be supplied remotely via several IMSP protocol messages.  This issue
could be exploited by sending a maliciously crafted packet to a vulnerable
daemon, it is possible to overwrite sensitive process memory, potentially
executing arbitrary code with the privileges of the IMSP daemon process.
This process is usually run as root.

It should be noted that this issue permits attacks in the
pre-authentication phase, which could potentially result in anonymous
attacks.

9. Invision Power Board Index.PHP SQL Injection Vulnerability
BugTraq ID: 9232
Remote: Yes
Date Published: Dec 16 2003
Relevant URL: http://www.securityfocus.com/bid/9232
Summary:
Inivision Power Board is a bulletin board system that is implemented in
PHP.  It is available for Windows and Unix/Linux derivatives.

Invision Power Board is prone to SQL injection attacks.  This
vulnerability exists in the 'index.php' script, which takes user-supplied
input from URI parameters and then includes this input in database queries
without adequate sanitization.  In this instance, it is possible to supply
malicious SQL syntax via the 'sort_key' URI parameter.  This issue will
permit a remote attacker to manipulate the logic and structure of database
queries, possibly resulting in bulletin board compromise, information
disclosure or other consequences.

10. GoAhead Webserver ASP Script File Source Code Disclosure Vul...
BugTraq ID: 9239
Remote: Yes
Date Published: Dec 17 2003
Relevant URL: http://www.securityfocus.com/bid/9239
Summary:
GoAhead WebServer is an Open Source embedded web server which supports
Active Server Pages, embedded javascript, and SSL authentication and
encryption. It is available for a variety of platforms including Microsoft
Windows and Linux variant operating systems.

A vulnerability has been reported in GoAhead webserver that may result in
the disclosure of ASP script files' source code. The vulnerability exists
due to insufficient sanitization of HTTP requests to the affected server.

A malicious attacker can append '%00', '%2f', '%5c', '/' and '\'
characters to the end of a HTTP request for a specific ASP file. This will
result in GoAhead webserver divulging the contents of the requested ASP
script file to the attacker.

Information obtained in this manner may be used by the attacker to launch
further attacks against the vulnerable system.

GoAhead webserver versions up to and including 2.1.7 are reported
vulnerable to this issue.

11. Botan Es_Unix Privilege Escalation Vulnerability
BugTraq ID: 9242
Remote: No
Date Published: Dec 12 2003
Relevant URL: http://www.securityfocus.com/bid/9242
Summary:
Botan is a library of cryptographic algorithms for various Linux/Unix
derivatives.

Botan is prone to a privilege escalation vulnerability in the es_unix
module on Unix systems that do not support /dev/random.  This module
provides a generic entropy source and works by gathering entropy from
external programs.  The source of this vulnerability is that external
programs may be called using popen() without fully qualifying the path to
the file.  A local user could effectively change their PATH environment
variable so that a malicious program is called instead of the intended
program.  In some situations, this could be leveraged to elevate
privileges.

This issue was reported by the vendor to exist in the 1.3.x development
series of the software.


III. LINUX FOCUS LIST SUMMARY
-----------------------------
1. UNIX Authentication (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/348212

2. Static ARP table in Linux (Thread)
Relevant URL:

http://www.securityfocus.com/archive/91/348018


IV. NEW PRODUCTS FOR LINUX PLATFORMS
------------------------------------
1. Immunity CANVAS
By: Immunity, Inc.
Platforms: Linux, Windows 2000
Relevant URL: http://www.immunitysec.com/CANVAS/
Summary:

Immunity CANVAS is 100% pure Python, and every license includes full
access to the entire CANVAS codebase. Python is one of the easiest
languages to learn, so even novice programmers can be productive on the
CANVAS API, should they so chose.

Immunity CANVAS is both a valuable demonstration tool for enterprise
information security teams or system adminstrators, and an advanced
development platform for exploit developers, or people learning to become
exploit developers.

2. SecretAgent
By: Information Security Corporation (ISC)
Platforms: Linux, MacOS, UNIX, Windows 2000, Windows 95/98, Windows NT,
Windows XP
Relevant URL: http://www.infoseccorp.com/products/secretagent/contents.htm
Summary:

SecretAgent is a file encryption and digital signature utility, supporting
cross-platform interoperability over a wide range of platforms: Windows,
Linux, Mac OS X, and UNIX systems.

It's the perfect solution for your data security requirements, regardless
of the size of your organization.

Using the latest recognized standards in encryption and digital signature
technology, SecretAgent ensures the confidentiality, integrity, and
authenticity of your data.

3. Cyber-Ark  Inter-Business Vault
By: Cyber-Ark
Platforms: Linux, Windows 2000, Windows NT, Windows XP
Relevant URL:
http://www.cyber-ark.com/datasecuritysoftware/inter-business_vault.htm
Summary:

Based on Cyber-Ark Software's Vaulting Technology, the Inter-Business
Vault, an information security solution that enables organizations to
safely overcome traditional network boundaries in order to securely share
business information among customers, business partners, and remote
branches. It provides a seamless, LAN-like experience over the Internet
that includes all the security, performance, accessibility, and ease of
administration required to allow organizations to share everyday
information worldwide. To learn more about these core attributes of the
Inter-Business Vault click on the relevant link below:

4. EnCase Forensic Edition
By: Guidance Software Inc.
Platforms: DOS, FreeBSD, Linux, MacOS, NetBSD, OpenBSD, PalmOS, Solaris,
UNIX, Windows 2000, Windows 95/98, Windows NT, Windows XP
Relevant URL:
http://www.guidancesoftware.com/products/EnCaseForensic/index.shtm
Summary:

EnCase Forensic Edition Version 4 delivers the most advanced features for
computer forensics and investigations. With an intuitive GUI and superior
performance, EnCase Version 4 provides investigators with the tools to
conduct large-scale and complex investigations with accuracy and
efficiency. Guidance Software?s award winning solution yields completely
non-invasive computer forensic investigations while allowing examiners to
easily manage large volumes of computer evidence and view all relevant
files, including "deleted" files, file slack and unallocated space.

The integrated functionality of EnCase allows the examiner to perform all
functions of the computer forensic investigation process. EnCase's
EnScript, a powerful macro-programming language and API included within
EnCase, allows investigators to build customized and reusable forensic
scripts.

5. KeyGhost SX
By: KeyGhost Ltd
Platforms: BeOS, DOS, Linux, OS/2, Solaris, SunOS, Windows 2000, Windows
95/98, Windows NT, Windows XP
Relevant URL: http://www.keyghost.com/SX/
Summary:

KeyGhost SX discreetly captures and records all keystrokes typed,
including chat conversations, email, word processor, or even activity
within an accounting or specialist system. It is completely undetectable
by software scanners and provides you with one of the most powerful
stealth surveillance applications offered anywhere.

Because KeyGhost uses STRONG 128-Bit encryption to store the recorded data
in it?s own internal memory (not on the hard drive), it is impossible for
a network intruder to gain access to any sensitive data stored within the
device.

6. SafeKit
By: Evidian Inc.
Platforms: AIX, HP-UX, Linux, Solaris, Windows 2000
Relevant URL: http://www.evidian.com/safekit/index.htm
Summary:

Evidian's SafeKit technology makes it possible to render any application
available 24 hours per day. With no extra hardware: just use your existing
servers and install this software-only solution.

This provides ultimate scalability. As your needs grow, all you need to do
is add more standard servers into the cluster. With the load balancing
features of SafeKit, you can distribute applications over multiple
servers. If one system fails completely, the others will continue to serve
your users.


V. NEW TOOLS FOR LINUX PLATFORMS
--------------------------------
1. Stealth HTTP Security Scanner v2.0b47
By: qw erty   <[email protected] >
Relevant URL: http://www.devhood.com/tools/tool_details.aspx?tool_id=353
Platforms: Linux, Windows 2000, Windows 95/98, Windows NT
Summary:

Stealth 1.0 scans for 2883 HTTP vulnerabilities. This tool is designed
especially for the system administrators, security consultants and IT
professionals to check the possible security holes and to confirm any
present security vulnerabilities that hackers can exploit. Totally free
for commercial and non-commercial use.

2. pmacct v0.5.4
By: Paolo Lucente
Relevant URL: http://www.ba.cnr.it/~paolo/pmacct/
Platforms: Linux, OpenBSD
Summary:

pmacct is a network tool to gather IP traffic information (source address,
bytes counter, and number of packets). Data is stored in an in-memory
table whose content could be retrieved by a client program via a local
stream-oriented connection. Gathering packets off the wire is done using
the pcap library and one or more network interfaces in promiscuous mode.

3. nload  v0.6.0
By: Roland Riegel
Relevant URL: http://www.roland-riegel.de/nload/index_en.html
Platforms: FreeBSD, Linux, NetBSD, OpenBSD, Solaris, SunOS
Summary:

nload is a console application which monitors network traffic and
bandwidth usage in real time. It visualizes the in- and outgoing traffic
using two graphs. It also provides additional information, such as the
total amount of transfered data and the min/max network usage.

4. pam_usb v0.2-rc2
By: Andrea Luzzardi <[email protected]>
Relevant URL: http://www.sig11.org/~al/pam_usb/
Platforms: Linux, POSIX
Summary:

pam_usb is a PAM module that enables authentication using a USB storage
device (such as a USB pen) through DSA private/public keys. It can be set
up to work with any application using PAM, such as your system login
(login), your X login (XDM/KDM/GDM), your screensaver (e.g. xscreensaver),
and many others. It supports multiple users for the same device, multiple
hostnames for the same user, a serial number access list, and private key
encryption. It includes usbadm, a tool which helps managing users and
keys. In short, you will be able to login by simply plugging in the USB
pen and entering your login name.

5. Fast Logging Project for Snort v1.0.6
By: DG  <[email protected]>
Relevant URL: http://www.geschke-online.de/FLoP
Platforms: Linux, Solaris, SunOS
Summary:

FLoP is designed to gather alerts with a payload from distributed Snort
sensors at a central server, and to store them in a database (PostgreSQL
and MySQL are supported). On the sensor, the output is written via a Unix
domain socket to a process called sockserv. This process is threaded; one
receives and buffers the alert packets, and the other thread forwards them
to a central server. With this approach, the output is decoupled from
Snort, which can proceed in sniffing instead of waiting for the output
plugins. At the central server, a process called servsock gathers all
alerts from the remote sensors and feeds them via a Unix domain socket to
the database. All alerts are buffered to avoid blocking due to a hanging
database access (or a slow network on the senor side). A short description
of alerts with high priority together with the database ID can be sent via
email to a list of recipients.

6. GKrellM v2.1.23 (GTK 2.0)
By: Bill Wilson
Relevant URL: http://www.gkrellm.net/
Platforms: FreeBSD, Linux, NetBSD, OpenBSD, Solaris, SunOS
Summary:

GKrellM is a GTK-based stacked monitor program that charts SMP CPUs,
disks, load, active net interfaces, and internet connections. There are
also builtin monitors for memory and swap, file systems with mount/umount
feature, mailbox checking including POP3 and IMAP, clock/calendar, laptop
battery, sensors (temperatures, voltages, and fans), and uptime. It has
LEDs for the net monitors and an on/off button and online timer for PPP.
There is a GUI popup for configuration, plugin extensions can be
installed, and many themes are available. It also features a client/server
monitoring capability.


VI. UNSUBSCRIBE INSTRUCTIONS
----------------------------
To unsubscribe send an e-mail message to
[email protected] from the subscribed address.
The contents of the subject or message body do not matter. You will
receive a confirmation request message to which you will have to answer.
Alternatively you can also visit http://www.securityfocus.com/newsletters
and unsubscribe via the website.

If your email address has changed email [email protected] and
ask to be manually removed.


VII. SPONSOR INFORMATION
-----------------------
SecurityFocus.com would like to take this opportunity to express our
gratitude for your continued support. In the upcoming year we will improve
and grow so we can continue to provide you with all your essential
security resources.
We would also like to wish you all a great Holiday Season, and a
prosperous New Year.

-The staff at SecurityFocus.com
------------------------------------------------------------------------