|
Posted by Mervin Pearce [SACS] on September 6, 2007, 1:12 pm
If you were Registered and logged in, you could reply and use other advanced thread options
I have seen one specific box in an environment which I tested which has the
IUSR_%MACHINENAME% with ADMIN rights. I have included a PNG file and if
this is blocked I have added a link.
http://www.spisat.com/images/aa.png
Has anyone seen something like this?
begin 666 AnonymousWithAdmin.png
MB5!.1PT*&@H````-24A$4@``!/X```!;" (```!L_-S9````"7!(67,```[$
M```.Q &5*PX;````!W1)344'UPD&$00=K;``````=T15AT075T:&]R`*FN
MS$@````,=$58=$1E<V-R:7!T:6]N`!,)(2,````*=$58=$-O<'ER:6=H= "L
M#\PZ````#G1%6'1#<F5A=&EO;B!T:6UE`#7W#PD````)=$58=%-O9G1W87)E
M`%UP_SH````+=$58=$1I<V-L86EM97(`M\"TCP````AT15AT5V%R;FEN9P#
M&^:'````!W1%6'13;W5R8V4`]?^#ZP````AT15AT0V]M;65N= #VS):_````
M!G1%6'14:71L90"H[M(G```!`$E$051XG.V=>YP=19WH?_TZY\R9F<SDS4!"
M9I+A$0E@>/C "R:""(M^K@]67-3=:$(6<7UP"8)&-("@V<PNOH@("011%O;"
MREY1(J($% 4%5#8@1F.B!/+.3%Z3F7.ZN^X?U5.GIQ_5U:]SNL_Y?3.?DSYU
MZO'KJE]5UZ]_U=72.9_X,2 (@B (@B (@B!(\R(]])NA1LN ( B"( B"( B"
M("DB[1\E>PZ21HN!"/$_6PXT6@0$01 $01 $09#\(3=:`"0$CS[QIX6G=#5:
M"@1!\@J.(<F2]_K,N_Q9!NLV"^2]%?(N?]ZI3_UC*]<9M=$"M"[_MNXY\<A7
M+3H]/4D0!,DC>7GW! ```0!)1$%4CS[Q)_'(Y[_UN/0D:0[R7I]YES_+8-UF
M@;RW0M[ESSOUJ7]LY?H3ML[1]&TD9YSV.I%HSS[_4MJ29)-*!3;]CZ6B6S8I
MAP]*C94':3CS3M?IP3&]QL3)^*0&CB$)D_?ZS+O;K-@ODO17R+G_>J4_]
M8RO7GU!U/L[TG3-%WKS']/LJ0OP<D%"\^\QN=MP$.Y8=/BC][.'"EDWRKNWR
MQN?PO@SBXHZB_5O?\<8QO4;?<>;9[ZA.Z\&A)B+O/K.[SJ.'?> "X;&K_G*&
M)<* 3$\J6H4D3IP:SG[K-):&U*V?0K(,6ZW54CW?.LS'LC!0N(>LUE&A^M2_
M%'_+%2J05V=4&A8!U/G B%`D@2`( D60=(TT,($&(=& ;LV5,['AR$+9N4
M3'(D:NZ(6;=^,X26M7M3I6[SL>P,%()C79.I67;JGP]'3C^9,WLNB8..M>8A
MOUH[N%>ZYB,=N[;+`#!Y,LR8`9,G0T\/* HH"L@R* I($LCRN$^D%3!-(*3V
M2?\,P_K;OAWV[H6=.V'W;OC%3XJ__97VV8'!$T[194F69!EM8!%:YT8O@B!(
M?6BIX12C@8N]```!`$E$052O($B^$#5]YTR1`8"Y<^E7%F+_=?,>T]/QZYF$
MQ>=DW@I\]&WM[L [?W8X6FYLJ0.[L\N^TF-^N&<.GG&2&NF>V:#MVBZWM<'\
M^3!U*I3+4"Y#H0"J"JIJ6;\.NQ?-F1;!;O=29Z]A@&F"KH.N@Z+ I$EPS#$P
M. @OOPQ#0_)SOY3[CC\DRXJBJ)(B*XH*I"4,X%3'$)$0^X!@-Z?%QPV',\J]
MH,Z=H9]4>FNM5GM(2!YYN@_"(R<-K4,ZT]4.1RDRER5+><<O/N^*U#*]@#
M(VMI'7JH6SQWN8YADW-@S\=SL(TFC-^(W2C2J/^T6]E=$*>].&G=][L][X!'
MZ!=9:%."R0```0!)1$%40*3.A4Q?9LK2`[MERXX#S52_)"*9-SUW_NRPH[7B
M9?Y>:OJRFR"F"9V=,#0$U=&1(X</*JJF:IJB:$0CBJ+(LD(`FMOZC3:&V+NS
MYVQ8Y!HI;LT"UY9VXU=$H)SQ)_21QV3/\^+7GN/ 'I]_@IS33/":$EC)@:WO
M*3 ]7\'+3:;(2]V*E)O!ZA4DJ59(54O3Z*%Q!@I^AQ*9/4(8[>)GTEC=2ZG^
MDRK%K^C N3K_1IAXG4?N%PU'I,Z%3%]FD;H=L_SX]D!^DF@QFPE[:I&XG@
M'HH.*M0```$`241!5-KJH-.J"N4RM+?#A G0V6F9OLSZI8Y?^Q_2"K!%SFRI
M,S5ZJU70K<V>+6^PJ@(`C(X<.;A_KU8H%8JE0K&-$)-H14V3)&C^I0)IC"'N
MCA]J*! Q:^TA87U]CI&*79X3&:^BU:?G5$#$8>(I,_$Q:W?^'X&/QG2("-3
M* [YK=MFHK&SIOAM%'.$L2,X4-C3!MX^BPQGN!-W'=>!Q.O?\Z<$M=3=CISZ
M#&S6A[S<OW9$&BM3#<H(K'/1!<\.:U;$QVNW8!V^W,"T@E(U&;2U&F[W0H-F
M'M3T[>B SDYK@RM5!4US>GW9'E?-;L@@UAY7]C^[R[=:K=G#U:IE^E9&CQP/
M/G7J```!`$E$053:/U@HEJJE-M,P""&2),FRK*@MH2QI!L7KH$\;.?DQK!
M$AF3P]K _(2.$Q2Q?A/Q,W!D:$VP;K- =F9-T4AOA DU4"0(?[C+FF(G7O_I
ME4)Q-VO\/#EE)1*G(?#K7,AWQI[%=5NMJ7IH6]#]F^#]XT2HY[18EBTWKZ99
M+E_V62Q"L5@[*)7PK[7^F +050#TCQVSFR,`4*V,'CZT__"A_<.'#@P?/E 9
M&=:K%=,T@!!"6N(]P.)C"+M_S/[<_5TD)&R$0'DBY,#67X'->YP(F9I5.TY0
MQ$F>N/QI5').P;K-`IGJH0SQ%DQ#?K^!PGX@LG)$O+BP.61'P^NC/XF4'F&R
MV ```0!)1$%4PAD?HM6G8.OGU/W+J?-Q7E^'<6OW\;HWLG+$<>.()FC'"F:.
M@*L#V <R>TB<;/UR2.,.(O7K4C-&4<99.)IF_6I?[=P27KS6QKVWLWV',T)J
M^Y^Q0$.OCAXY3$P#`!1%U0JE0K'-T'5%4159:=!YY SW"! JA#-QMX\;GD\B
M.> /1'P9Q,\W6=PRNRM$T+;A)$SO?!WM(BB#9YORU<9]CIEU("1%`^L66J!Z
M!4E)2_GSL;2]<XD,%)S3Y)M;]LA^PGA6=7.0>"O[]5R_9DVP:$FF_TEO:/
MDCT'6\(9DC7^;=US9YSV.I&8SS[_TE6+3J=)OOR),QY_87_*HM6;^_*GLE$`
M``$`241!5&XOW7='3X)QSH+L;NKMAXL2:UY<>.![TQ5?[M@)VHY?^52I0
MK=8^!P=A: B&AF#_?GCF&=BT"<[[]\XSG/:,52J:V]W-'5V36Q8\*DMO;.
M0JE-532IN9X1?_2)/XF/(>>_]3B:)"]C2/V7?>:]/O,E?[Z6]6+=9H'ZMT*R
M-9DO+6H^ZE/_K=#*61MAPM8YOM>WD3S[_$L14@T=KB8N26,9J6KT@%FVS/%+
M[=Y"8=P[?NGJ5C1]FQNZ/)EMZ4R?Z06;/6S?_(Q1U<WAT:IJ2#I1#7F4J!5#
M&:U 2=-5584F,WTAS!AB'S?R,H;47\Z\UV?&Y5^T8"H[7K=A=W8S!JA<```!
M`$E$053J302LVRQ0AU9(M28SKD5-3WWJORE;.>,C3*@ZE\BA9U.5!DF0?__9
MT0"@RLUF\SUR;\?Z>SM./146++!<OI,F64_VLN=[V4)H^X.=: `W)71'*X#:
MOE;L;W04*I7:Y[Y]EN-W<!">>0;^^$>8=^;/3WGC4XJJ%4KE4GE"><*D<N>D
M4GE"H5165$V2FLWT#8MN$FC&,:11Y+T^\RY_EL&ZS0)Y;X6\RY]WZE/_V,IU
MUL2!:]V+QIX)E9=54RE"H2R7.M7V#J6]#&V%JJ9I:G._VA=!=8(`- ```0!)
M1$%4$ 1!D'S1\_P+C1:AA=A^VBGR34_.F[WW;OS,Q2<`-%R&-#XG#O\>P+F8
MV?[GV/B*+H%F?]0MC'_-\<>:U?ZP-UON;G_!E:<96ZKN>&+KM$G#SS[RYZ.G
M'WKBGA?Z9@X]]-5?G=BW[WLW/WE2%K0=QY!F^LQ[?>9=_BQ_8MUFX3/OK9!W
M^?/^69_Z!X#[-\XZZN#/V.?T`_B9UF??GKNEYV\]:_&+J^ID:R/Q6'[.1MI)
MFHSMOYFYXS<SSS@#SCL/)DR SD[H[H9BL?9BF[8VRP1B&SY3$PCWNVH^J,N7
M;>Q<K5JO\*5_1X[ Z"B,C%B?>_<Z%SQ/F?WHU/[')%D#M6* O<(```$`241!
M5"1I'7)Q@E3HD@L=H!0E68.67_#<K&-(H\A[?>9=_BR#=9L%\MX*>9<_[]2G
M2S]9H/WE1FQ)/((@"((@2%- QC[)V"&:P0E#3%U=>]+5:/TBC<(TY#T;I^]]
M@`R[)EUJ_C/4;,QTO-8/=K?I'F0)(LBY<:NG;W/D# :F<$01 $09"Z\=O5
M;^%'F'_%4V'R,$DXVQ@)%F(7O/Z/G_K6:=]_)?V`T<X/:8'[A!'N"?NY/P\
M_4(<$CJ$]Y0G<M'NXJ*E2AS[F7(*HF+X"9.VD!R,4770^;F]```!`$E$0537
M"SV[7^@Q1E4`F#H5CC\>"@5K%ROW?E<4MRL83=\FP][<INEL_9A$4WC/#IYV
MH74CPOCF5R&.BP4_6T<T*0R 16:;3+L3T'SXM@!!4*I0E(<SSXF3,[^S
M\SN%9TU&J"@_,2(D0>I,&CV4DVV<'@I!^BQR7GZ**BZ,_6M@E_&,+")2(,3?
M-QMF<TT"0*C=>_.B.9^]\X^2%0A?6G0\B_3Y=9O8<6'6__:@]Q'_@E:3E"
M>7W]-%YP]/1,[@X4">'+Z98G3M&!9R&2*B5$JH7?.@VYU%6'M5V_G;'WY:G4
MZ.WI@?GSX>23H;W=VM9(53T\N@XWK]WN592@(I^\]&D`] ```0!)1$%4NOCV
M@;$ORWXRNNJ<M$XN+!NN+2Z\Q3INE&!4!E;ZUKO>V7?Y3[)22W:W?V0>^\J9
MYRU_`2(I?-CQQTUF)Y21QS=^A8AD&Z'<:.>(,!)I!7>(Y]PW;+9QDL144<[U
M.D&U%.D4[IJ,5E&!DC1JQH+P2:F'IC'\AAKD_7Y*9+@0M\PA'_=ZZ%)GTS1-
MDGM&%KQTQ2\ZVDPWDSVJ.%E]]JN^E>T[?]?L>8U0]^FAXYSOA[_\>3CX9
MRF5K1RNWX]>^VMGA]67/`'/^MMU]8?'M`U<]1@C;4-$```$`241!5'2=Z/J6
MV\?>'OQPKNW!2=,[&_;VG=];H/73UOO?M?"6V#98SK1]<>O@H&WOVOMMKI)
M9?N3`0`&5MV]U?I*G>V-D,02P+76/2,KG)NL7Z<T4KFS#76_$FD4,5LAP:FD
M.Y_X<P9.9)$;QR)P+,E0?2U.34;HU#ACR0OQFRFI6[=\G8DC9_U5,;(UD0H$
M`."F1?W+[_KCB@_-!F(2TR2F:1@&/2"F^<6[-UUW:1\+9\?$-*^[M(_%M!_8
MD]N/6_7/D->>='6#6QI)#G<?=O1DSZ_LT^\FG..G""'_=?59?_U9_XOWG+[K
M]SVF(<^8`>]^-[S[W7#""=#1`>WMT-8&I9)Y' \"```!`$E$053E]:7&C]OF
M@&47G:N HBP8((3\>/'L1IB:M((?77KKS\<L3X!T2PS\<VQC%M;N_=1[9GWN
M`[-7+JZM$?KE+6^RZ[]#/_E=P!-W#NX>YP@1[SBA3C8C1)BO9_6^.Y(`F=('
M1Q?CEY+]#IBIND5R2F.UR.T9#I76?IS?BZ8/A!!"/PDA`": :9HF/7!\I=C#
M[3^Q@QN^^Z?/7]KGF55K_H78X=E^.]-/9?GW@3R3BV/O*FP5A/L^JUN>^$5G
MDP@GY1>3U2UGB4BT!39W7G;6@O?NZUL-'G)?T@```0!)1$%4`-,`8/9L./UT
MF#P9VMJLUQ?1%_/23[K:F2UX3L#1M^&'`P#++EK@\=/6M1?V+5F_['&R:L&X
M+];ALF4#`P.P[/$M)ZZT?R6K%L"&JZ6%UOII*SD`#;Q@S9IY2Y8,``!<L&;+
MLFS-FHU+/$2A":TO%ZS9\LCB7I;;FC4;E]#?ECW^."RT"K7E[EE1]>!KW_\K
M?;G1VFO.6KKZ%0`XZ\JG)5FCOWJNB?+K`IZCAV<.@?-I[3J'FJ^V3=7JPX
M*R1%K Z_<I&ZD?:<6/R*[#D_%BS('K%9@4\```$`241!5#F.T]B1CY_D@N.
MO93 !9\(XDE8)8DP5ZQ/$D:H3N>X0+,DU!?-$</36N%8$PV D*]\]/AKU[PD
M`5Q_SY^ONW3VE^[],UC/$A-;+.LK(>2F_]B\_!_FT,\OW?OGY?\PA_UD/W!\
M;<S9901"PNWP[#GS<UR91%9!I'IE]5N>$;GHS!+YI-P3"$YRSD# 7Y9VZ-6N
MG;\]9OYJ`)BD*-#7!_/G6T8O7=M,+5[ZLB+VE"]S^B6RTG7KYHT14P[ 182L
M`H"M:U?:OXZ9N%L>6=R[=>V%?0LEL!EUZQ^ ;Q&R:NO:"_N6++EUP^)5B[^U
MYH&:@>U@P:K'EPTL'%@H#3"C$@+CHE\+```!`$E$052+8))L@(&!,;NY9N&+
MI?5@SN)KEDDKUWY\P;FVP U7UX3?<+6T<,G'UI[+Y!QX>0XA9.O:"_N6#"Q<
MN68+(;U;UU[8MV3AU1>Q&P1^DJ3,I]XSJ[V]O;N[6SQ)V('+KU\XKJ.!&7JF
M;=08Q3?I/6\!N!.*9.Z9Q'W3P5$*4@<2N43R,^'?>^)D$NK&D&?D"&=GS\=3
M\LA$TW!T^;8XD748N-TMC21^"&85V.D\C5N.&*W<"YB%W&A!,D$^WNOKV4_X
MDTN$0ZC;>!$NSP\]!'_Z[Y,.O=H%`)H&LV?#_/G0W>TT>IFY2__L*UWM#_<V
MA@M.[/7\NN&'`P`77'QN+P#T6'OKTP```0!)1$%4+KYFV9+U=K?MV ]SY@&L
MW[AY*RS@E[)@%2&K-EPM+1Q8TB<M&7,J\XL8DV3!1<O LGUMEJ]86F]A/KYF
M&7E:9UB+/QE"ZD"T5DBC[=+3AU#W:Z+E'#E;[ 4(GZ;1D/2Z802R=MG]TJ+C
M=5TW#,,TA?:C$C1K:;0D!,P](9[UC7GK/;TU<ND5G5_J<\KN4CYS]EDO_^>I
M[WD/''JU2]-@WCQX__MAX4+HZ8&)$Z&K"R9,@,[.<<_W,M^OXSG/1#8WZITS
M+V+*>7-ZO;Y2-_+Z)7V2)&[K&OD```$`241!5$D27<Z[<?/6&")2^Y)L67,!
M]3UP"'EYJ32J*B&$-B5W!$"KZ/N),_;G@IN_)HK&WZB.D+"FK4B'N H
MXB(Q2&KR%]\M&5,?^"N5V*H*D74*XB6RG 7//9J&H\NWE<E.#XT)IQLFU=-S
MRJK+3KCVSC]^?MVF%??\^8;O;O[2O1[&*CIOX^/A]75,O!P+XAV!XG@F=P=Z
M1O.41UR,.$4'9A6S6N+ .2G/V7.$.UON?/QJ8-TZN/YZ^(?5`-!>*L'K7@?S
MYD&Y[.WI=:]M=FQKY'@J\A[W```!`$E$052O;W1LKM$8N=2P?)SVY<G)T'ON
MQ1? ^O4O;X7%?D5L=:99\/$U%_0]\-,-%V\<[VX62>LMQ.)KEDD+E[#OU)ML
MK5/>"A#D-[9GE59%!;/Z!W_[]/OZ[0N>S[OV-[_\^EO?<M5S]&NH/BLX>@0B
M,G38^Z](GHD32D@((Z??&.X7H8'C:K,B4J6!K9"2YD>0)%3^H2Y\+'*JE_MH
MFF<$`):?L_&F)Z.Z,=/!-.0]&Z?O?N'HRL$B`)3+<,HI</SQX8Q>]QN,Z!)H
MMAR:9L)VPRH4G!L"PDMCV0```0!)1$%4<QBWFY7UC5IDCH=1EZP'^S97C@VB
MG-M9;7ED<:_OL?V+?0.J\=!-H-S[;/EEZY0$:IM0U4Q,\;3CY1A?09;!:Y-P
M7/BXW.PE"IQ%D$89QKB_T5&H5&!TU/H;'H:1D=K?GCTP. A#0S X",\`W_\
M(TR9_>C4_L<D6:,+GN7B!*G0)1<Z0"E*L@:2'%1^DY/!,237Y+T^\RY_EL&Z
MS0)Y;X6\RY]W1.K_MZO?PH\P_XJG^!&^V7'O_1MG`1 P#0`#3(.^U@C ;/4M
MJ5+@R1EGI/*LKZ>_,?%2D,9BC*I[7IR^^X6CJ\,:`'1WP]RY,'>N9>YRC%['
M6UOM$%([8'_V7]-N,```$`241!5 D!TP33#+$6>N:B1_3>J]6%DK75,"Q[
M3%^U`, P%GSEL64#YRWIDY; ^<NN.A_6/PJ&`88))@`0, P``'!\A05?T1\G
MZL(^:0D`P/EK-C^\>*8!!AV?3# -, `,`@!@FF 8"RZX"@8&%DH#%]R^^9&/
MSK))=O:JS;=OG+.427;![9M7G6V X5>$4Q(`Z%WXW@M@_?KSWWLNE<%7/(^T
MX)Q%4'M1BY>VLFE:+4YP$<0!$$0)&,$6K9(UD"O;Y[(R/V_ZK"VYC=K_0
M8XRJ`#!Y,IQ,\Y=H```!`$E$051\,O3W>UB\]HVLK%?(^NS;3-\ERQR_U.7+
M_NP9TC_Z4E_V=E^D:6!V+SV@+M]*Q?I#KV],,C*&- UYK\^\RY]EL&ZS0-Y;
M(>_RYYWZU#]Z?>O)DS/.D!>_N(KN=(6?V?^D-%"&ZK V]P^OO'3/Z3M^,],8
M5:=-@_//A_>^%TX^&;J[G1M9T37/U&JEIB\S=YE'EQDYCC_F]*,>/_L?"[?;
M2/C7-'^.QK4K@ @GM&\&@(N/>A@`/C;S'@"XZ;A5`/"MN<L;WG^S\-GP,:3)
M/O->GWF7/\N?6+=9^,Q[*^1=_KQ_UJ?^*9\X=AT`7#[C>P#PD6/N!X!_.OI!
M`/@P?B;ZIO&S90```0!)1$%4>=-Q*Z4'[OLV($@0NW9W_M\'3G_\B>/IUQDS
MX+33H*>GYNGU?)HW\ V]U)XAQ/FX+WO3+\W6GC\]L.^&);>Z)Z^I<-SUH,[>
M:M4Z.'(DP.M[^FG?/_.,_U95I5@HE,NESH[VCL[V<KFMH&F:IDH->UD6@B (
M@B"(DY[G7R $"(!IF*9I&*9IFJ9IF 0(/NV5.'^==Z+ZODN6-EH,1)0'[[^]
M_NWUN]_!RI5PWWW6U]FSX?6OAVG3G&N;Z1)E10%5=6[1#.!-?^29\.948O
M(2#+M2<\F;O/X?B592NAN#R07VYWL=/GIDX[^J23SR@4"G2'YRE3IDR9
M,J6[NT9]E=T```$`241!5+M<+A>+1;GE;Y,T9 QI8O)>GWF7/\M@W6:!O+="
MWN7/._6I_U\^_R]GG?T.0@A]G:^NZ^R]OFC[)LZ);WN;VF@9D.SR]-.P<B4\
M]! `@*) 7Q_,GP^3)T.I9-F]U ?+C%['*WD9=EL7P'L9L]V%JZI@&* HXQR
MA@&Z7LO9L2,TTC2PNQOTH%H%70==]U@"C2 (@B (DFNVGW8*O/.=Q#3-:E6O
M5BN52K5:K5:KU/O;:.F:$#1]$0\V;(#KKX<-&P``-,WR]'9W6T8OVVO*OG^5
MP\T+,,Y;R\P59L3:[5Y)LC*AN0& JCKM7F;HPO@%TC0<:1H<MT68W<N>! [K
M!T93!;TJ```!`$E$0500!$$0!,DXTA@`(,LR(027JJ4!FK[(.!YZ"*Z_'G[W
M.P``38,33H"33X;.SMKR9K>GEQJN=AQ+51T[45$_GAU9MIX0IH\*T,[C^:
MBEG+`+Z/$"/YQ;'*G=J]NNY\!AA!$ 1!$*2Q!.XA(KYHF9F^U.X%`/3ZID'-
M])4DB58T.W"$@ZV!W2&.<$_<R?EY^H4X)'0([RE/Y*+=Q440. WL9\HIA0KO
MKC'[K_1XW3I8N1)>?AD`H%2"$T^$DTZ"<MFR>.U&+W/VNA_H=7AWF8^7^>[H
M0;4Z;OLKMK9Y^O3:5\-P.GY9$?2]O@!H]S8G=M.7.7O=+M\(?<NO(P2F&A,L
M*'*2'(%UB_ )[*'1)LSV'#P;/7X2OO!UBQQHDG ,'+$?@CJG@^DB1U=G8.
M#@ZJJDJ_]O;VOO+**_37F3-GT@-WB#W<,Q"Q$\+KZS>M$1P]/9.[`T5"^'*Z
MY8E3=.!9Q!<X,B*E\%N'$#(R8AF]6[<"`)3+,&\>S)GC;?2ZG^DE8_M4$=N;
MBJB'UF[N4D^OW>LKRS Z"CMVP.[=\-IKL'LWO/6M\(YW6,_ZNE]?1(M@.V !
MH-';Y%!5=:B!??LK<:9/GW[PX$&(9$3%[\Z9G5"F-+Z)9!NAW&CGB# 2:==D
MZ<L```$`241!5#BWY1:M<<.*&FKZF$&P;I% $ADG1?0J,-L(23C"US-RH.29
M11H#`)C=2\](TS0`F#Y]^LZ=.VED=DP(88$,1Z ](4*)N. YYD0D5'+/R Z-
M3[7HL/TG+[.TH2'+Z-VQ`P"@JPM.. &./W[<RX3LS_0R3R^U>*DYZEB0[+!O
MZ5?[\?[]L'T[[-P)@X-P\. X>70=*A50%- T, R09<M"IM!RU&K89]D;-I
M6B\ZLN]Z1>KXZ&]>NK8@T<:W"-F&NE^)-(I0^A#G?D0$Q4M)5^L&UBT2GYCC
M9 2]\DO"SR>.G.ZTT7+CW#O@VRDH*9OHJBL+L7D)(H5 ``'8``(/QYQPM
M```!`$E$052#@_3 'LAP!'K&:7'P6=^F@G_#C 4.#<%7OPI?^QH,#0$`='7!
MO'G0UU=[B2Y]YI:]I)>^KXA9O';/F_U13+:8V>'IW;</MF^'7;M@<!"&AVO2
M:II!R*]4]:E33GG7KW_].FHD4[N7FK[V]<SV+9W1]&T='&\YJE;'K2!@AK&#
MSWSF,W1KQ)_^]*<TI+V]7==U^Z(/&LZ^,N^'X(76G0,]YO1!1Q).2!Y-P03G
M@*..?LG%L:L[FU"Z5^RXY8E?=#1ITRXNPDEMWTZNO!+6K;.,WJE30+>#Y0``
M`0!)1$%48=X\F#&CYN"UF[ML83,U<9EOS;YG%7M\UV'N[MP)NW;!KEVP9P]4
MJS4!VMI&=?VQ=[RC>\.&%:KZ[(H5*P!*UU[[`X#7.?S&CD>([<\&X^WIUL'N
MU+4OI&>.7T^7[[_^Z[_2]_HN6+!@X\:-`'#X\&'VJ^<"*O?!F `>HX=G#OQN
MR#(?]V7%D:UGH,BEUD]RQ%Q)JH,ZQHML<5A1JNU6J56;!5VZRZ7"YS`AWA
M""6<U]=SYN>W<D PN2#B2?C+,^IV7:G#%#;426W="@#?ZNN#D8O]Z.<```$`
M241!5!$`@*./AI-.@IX>R]REG]2[2RU>@-HR9F;N$MO;B>QV+_WZZJNP>[=E
M[MH=<1,F#(^,K+_HHBG]_=N..6;WBA4KSCMOQ2]^\>SUUU\/MMY.%SP7"E9N
M#M-7&O]&7Z1%(+8MKY@>!K[FEWE]PQ04;N#RNT ZKJ.!&7JF;=3<EV_2<[S6
M82=)GDG<-QT<I2#U)UHK9,JAE%FP;I$()-*:B6@19L7Y99+]?/:]'S0VM
MP.4C(S!K%LR="].GUWR\[(6Z= BRFQ/LV+Z^E-FZE8IE[N["2QV_```!`$E$
M053>#7OVC"MTTJ0#_?W;^OM?_<$/EM]PPP=7K%CQUK>N`%O'!@!%4619EF69
MD,,`H.LP,@*J"H4"5"JU9:YLFRMF^B(M!3-]86S7*_=M%WI?AG+===<QK^_%
M%U^<FE0)C#RM,ZR)^WN1C(,ME1Y8MPB?:!J2QNV2>NIJ4LNA`V]81Y0O!?R6
MLKH#^;]RXK0R$7=XCD#DY/$ULLXZG84N1!7]=[\#@._/G0L`BV099LZ$4T^%
MB1/';=?,WDYDW[:*V-Y.Q#;7I7\C([!].^S8`7OWPMB3]A;''+-[SYZ'+[GD
MJ(<>^O07OG %#?S1C_[$S%U)DC[_^<\#0*%0((242B5J#KZ(F0```0!)1$%4
M_1*R#P`J%3AXL&;G4&N<+;I&$ "G0AX\"(</P_ PC(PX7Q:=%!%F`('74;_;
MY\SEFX4QA!)XI]\S)&PF$?)$ZD!VYMG-!]8M$I:DFC*^%J5G#J1T+6B"2TSN
M!,XR'J:O8[&[8T&\(U <S^3N0,]HGO*(BQ&GZ,"LHN63")R3>OQQLG#AAOGS
M`>#=L@RS9\.\>=#967/S4A\O=><2V[.4;G.7$#A\&';L@)T[8?=N.'1HG R]
MO3MFS=K^[+/_IJJ_.'QX_\J5*P`.G';:%2M6K* 1;KSQ1DF2;K[YYL]^]K.$
MD%MNN>7**Z\LE\NF:79V=JJJJB@*(=L`H%*I96Z:WO%LD6,```$`241!5*\.
M1EH<MA: *N?APW#H$ P/PY$C-=/WQAMO="QXWKES)]WF:BR3$#U4</00D#S$
MT-&H*UQZXYO?&.X7H6ZC:.N0B-)&B)-2N7D'ZQ9Q(-(T@>-DW51"?,06$=+^
M?$V@"<"/'(WL](6P)EC@M15Q4S-]14Q*=[A;Q3F%^8W=8?/DA(A++IAS3'G2
M=]RVS ! 5S+/FK6]OW^;IAD`\)[WG EPIC0&`-QTTTUT,;,D28JB*(KRS6]^
MDQ[<====JJK>?__]JJIJFJ9IVF67?7CU:LM]1T5R;F'C```!`$E$050RC)K=
MBZ8OPB"V9?"F"</#UM^1(^-V4V,+GJ=,F4)#Z#97?@,%?_2+,"QX9IB1H8-?
M8@0A`^LG?@Y((HA4:1KZ$%]#.($Y`NL6X9/&%-H=$C])6!4*E7\H:2.K-S.>
M918OV\**V#R]U-S=NQ=V[H1]^V#O7A@=K>6L:49__[8Y<[;U]N[H[]_&PB5)
M`JB9N[(-:N7*LDS]NNH8FJ;1ST*AP$S?M[U-7KT:=NZ$IYZ"WEZ8.1.JU7%+
MG='T12AT(&&F[\@('#D"?_L;O/8:[-\/`#!IW*K01@```0!)1$%4TH'&2H@@
M"((@2(N !D[N2,7T13VH,^O6P?77TSV<H:T-YLR!6;.L'9L!K.V1[6U"2&UA
M\^[=L',G# ["WKW.MQ Q[VYO[PX63JU<A[E+7\"MV%!M>)J[[%=%418L4.^X
MX]#RY>5=N^077X077X1B$3HZ8/)D5FC*-8CD!*;&A,"!`W#H$+"7%FF:<>ZY
MS[[A#2\!*(T2#T$0!$$0!,DL^=CA&?%D9 1NNPU6KH0=.P``RF7HZX,9,VIO
M)Z+.,0#KDXP]TTM?NKMG#PP.CGL+T:1)!WI[=\R9LZV_?]OTZ;4]K.SF+H5M
MSLP<O [OKMW*9;:NIFF*HM!/.Y(D??"#<+U=/14```$`241!5,DEA^^ZBSSX
MH/KTTZ7147ET%/;NK5]E(OFEOW_;_/F;3CMM4UN;M59!&@_@#H<(@B (@F2/
MGN=?@/:'&RU%"R$]<-^W&RT#$IK#APL_?.3D1Q^;.S14!H#V=NCMA>G3+:/7
ML3N4)$&U"OOV6:\@&AH:EU5W]_:CC_[#M*F;>X[Z0V=G[0U%8VGIDF;+EI!E
M^BE+DJ3(LB3+BBS+LJ0HBJS(ZI@I*\NRJEI'BJK(DB0KBBQ+BBS3Y#0'FB'-
MGQ!B&&:U6CUR9.3@H<,[=BC;7NW:LG4.?8KB- W$R;MKFS8W=W]W860I56
MEF5-4XO%8KE<ZFAO[^QL+[>5"@6-WF1_1H=)```!`$E$051IF+@(@B (@B#C
MZ7G^!4<(SGE31:W,OJ31,B"B%/YR_ZZN#ZR_K_C8?Q6&#TH`,&$"S)P)$R?6
M7O]#QC9M/G($AH9@[U[8MP\.C'_^<<I1NWN.?65JSVL],__65CXT9EA.-Z6C
MJ)D+``"2),L@RY(D2Y:-J\BR(BN*K*BRHJBJ-G904%1-5A15*\B*JBB*HFJR
MHBJ**LDR_91E19+&S'%9-B5)`@DDR;1M6&?HU6IE1!\^1 X.M7?O.W;F@>FG
M[JR.CIB&;IHF(?A*;L3-5 )3;5\E299!4:5B26IKA_8)I&N2T=E=*7= L4U1
M-31]"W^Y'\?\!,E[?>9=_BR#=9L%QN3%= ```0!)1$%4\MX*>9<_[]2I_I]_
M03_J;& 6+R$$T/9-$5SPG!MV;Y=_\ITW__BQ"=4*`$!W-_3T0%?7.*-W>!@&
M!V'_?A@:JCT#23EJYJYC9KUZU+&O3#MJFUH8!D*8*U4><Q!+$O7**D"-7<M?
MJTJRHJBJ+"N*JBJ*S<I55475++M7T21%H::O+"O,W*696(YCL-S'GB<XMGI:
M4[5BL:W=- P@1)9D0Z_2%]74K%^\(88P;"]VM]16T;1BJ5 J%TIEK5"254U1
M5#1Z$01!$ 3))H34C%Y"GTX$M(!3`4W?'+![N_S@'<4G'RX`G P`$R?"M&G0
MWFX9O4>.P($#<. `'#P((R/C$KE)C',```$`241!5![;O^N8WM=ZCMW6,_-O
MIJ&;IF&:]#6^``"2+ -UDU'7KDP-746295E1+0>OK"BJIBBJK*J*JJFJIJBJ
MK*BJ6I M0U>5QI8VTR0`DF7NTORYYBY#DB0B2;*BJII6*+51.2594K6"7JV8
MAF&:!B&$F"8`X/TPA"'!V(/H,EV>H*A:H5 L:<5RL:U=*Q0UK2#)"EVLWVAA
M$01!$ 1!/"#4*V7-=8GU#TD:-'TSS5\W*?_O.?/:H!@"1!9R=,FP:E$E2K
ML&N7M;VM?5OF4EF?T3<X<\ZN8WI?G7;T:WJU8NBZ:>AZU2"F2;N0),E@/:\K
M4]^L+,O,W*7>75FA[ES+J:O,#V$W```!`$E$050HJJRHJE90%$62%4759%E1
M5$629,O<M9[_#6?N.I! DF59U8K4'2W+BJH5*J,CAEXQ#=TP#-,P``" X*._
M"(,^C@X`]$X--7VU0K%0+&O%4K&M;.DMH-V+( B"($B27/J&;GZ$>W\]Q(]@
M,?:J86(:IFD",='OFQ(UT_?2-W3?^^LA^ND7V_ZK(Z8[86!6],"1B2,P,(13
MKD,=.7D*%NUYUA%2B?#2<^KZ^PK//E$S>MO:P#!@QPXX?-BQX'?'Z\]2C^D=
MG#%[Q^1IN_3JJ%ZM5"NCHT<,TS3N_?IUEUSQA?M7W_"!CW_1,G?'GMR5%.7.
MK_R??[[N5N:_56Q.77J@,Y$\C@```0!)1$%4J)IB/=RK6N:N;#EX09+H1E=L
M)3/$W$>72J:J`"5)DF1%U0K%Y?\T_ROW/F4:NFGHIF&,#0PX%B3,C9=?=-UM
M/\Q4H8(BC:VE!WK[AMZFT;2"6BBJ6H&NS)?&EO1'Z(G@TZE#)8^6L#Y$&-/\
M*H1_@> G$2\%B4Q@E4:[!-MS\+SP15"A4%?2")==AZYZ"A-6<G;,J5Y.I_"L
MR00K*EK=(HD@TKB<KN3.)]3XG.#P&V&0%\PMU#DZPNV_AHT<RG+Q@S,I%9P5
M$S+F\C5-TS2_^?G%'UMQ&R&$)K[MABM8S,N_L)H=WW;#%?:O]A#W@5^2%J0Q
M7E_/SN,.% GA%^0>V=HC"BP```$`241!5.,4'7@6(JD"^?VOU!]\I_C2<U;3
MT!V;Z9)FQN3IU<'=__&^)0MFG;"W>]*^FZYXU]]]X!Z].CHR7*'+@PU#I_;Q
MI9^X`22)$*(52W</7//1:_]=&5O,K*C:)[]\MZJJ]&%(15$5K4 M!T6U3 A9
MEN6Q?:KDL56C]-G@:*Y=#A]\XO/3,(,JB:)LFRHFJ+_^[$;ZW?1$S3,'33
M,"Q_+YJ^(5GV_C<,_.>O^7$,P^CHFA0Y>30Q$BG4>G>1+ -(S/%K::^BT@7\
M'WK39-HQH]F]H<8<-_694$:0+?*8QJD6PCE!OJU! WB;2".S[ALV6Y$D
MXN<5>-FU1^!/Y4/0=0%C```!`$E$051)SK>T`VUV2R%14Y"9((@39D(ETI
MJ>Z6X"#O]U,BPX6X90ZYN-=#" `!8@(`,4UBF^XN7?X->G#;#5>P8P`86PX)
M[A!V$)BDU7":OAP]XVND.X*@!*&4SS-RM'*C%1WV(A$JU;-/: _>4?SK)L4>
M:)K6JW=[CM7GSOY#WYNG'COGP(2)AZZ]=.FI;WZX,GID^&!%4921X8.&7C5-
M@YC$-$UK?RG+4%5,TRR5.TW3+'=TT5VI%%53%$U1U7';,LN*HFJ6H4MWJ[*>
M`4[+W'5 WQE,"%$D25$40DBQU$[H*1%SS.A%NS<<IFF6.[LBQQ%)'DV,Y JU
M='+L[@Q=R2]+23;QS0```0!)1$%4LLS6(R1"%J^4,8@VID7(-M0]2J11Q&R%
M!*>2[GQ"Z6I2BNTG1N2L!$6*4Y,1SCVE<0#AP[]1XOEK_/Z5U*U;OL[$D3/F
M.<:_NQVG]&0@\,WK+KO\B]_Z]@U77+;\Z]2))4D2V^?ULL]][8Z;/[GDLU^E
MX>P8`-9\^=,LIOT``%AR>U8M"S[KFPF>?+CPX!W%W=ME1WC_2?KLDRHGG#+2
M/^]0L30J;?[1\/3S*J-'#AD65Y^.!^O3IJZ+HD270;Y'6K/K/HZE6:JLJR
M<L?-G_K8BMM6?_&?/_7E=:9IMG=VFZ9YRS7_N&+-C]FVS%>__XU??>CWG_K?
MI]SZHY>ON%X;+FH```$`241!5/ $0LC:QU]QF+L?>M-D*HQ[=! /\;MO0J,Y
M?F(&,"%DT3D]WWUZ+S'-?WS+-!IGW<]W$$(^<DX/`-SU9.V=K@! `UGX1\[I
MN>O)[8Z8@7%HB.,G^JM(5NPG%NB6TYTV9HC?5XIIFDO?/L<NCV<<K5CVK!!.
M<A9-I*KM^215* U?]_,=B\X^"@"^\]0NNO[94VGM=^L\]=.AC7S<.8#/K4._
M0CDAG+OL?AT*O"9,[OS3(\)\/:/WW9$DR)0^1'8C9Y-,U2TB2#U'8Q$:JT6.
M;A@J9T]C-2.U&A,RMHTK>^VG.>;U-<>O=K1_]?N)'7STVEO6?/G3'[WV%L_X
M+4@4TY?RIX;8```!`$E$052IG6.>9[=G^)<6^Z_1]%6P7+?G(7[1"5*MP&,/
M%M??5[ ;O7-/T_OGZ2>^OG+\J2.*4C7TJJ%7]<KHD4.C9/C(\,&A:F5$KU9D
M6?[ZYQ8!@"1)2S[W-0!05(D04BIW4.<M]?&:IMG1-=DPC([NR89AK+K_&;H6
ME&[+;)IF6[G3-,W+WW'<W;_8(4GR/[YEVCV_VF/W[J:QP,;QDUVCV*_VTB]]
MT^3O/3,(`$#(!]\TZ7M/[R.$?._I?8X,O_NKO?2 Q5ET]E$T&@VAG_PXA!!-
M*P``/6 %L;2<K&A"EM:1A".J.[=0(9Y?65GN4_",P\[:72%^R=E/@E7MJ(3X
MA=;BLG:CW ```0!)1$%4/#,(`!]\XT2'(GFJ%M]N=&BLYXCAF0-_/ G5<007
MC#EPV[TBJ1PY.$[6/9+SQW8^@6(X+B[12D%BDO:<6/PJG-14.U0FGO>/.)W+
M$5.P.#\-1QNU6?&[?(#_Y<F/L$H28=);GR0,3J?SO"JY$W(NFFX)[0G%+9?Z
M\/7/?>1?;KS#-(RER[]QQ\V?9/:J'Q^]]I8[OW*E_;,^<N8:#]/7K0>.65HB
MA)V3V1%/XADM3M')\M=-RCVWE+0"G/IFO7^>,7=^Y<33JL0T#<,P#=W0JY61
MJEX9K58KU<J(7AF%D='*R+!>K9B&#@`?6W$;S6?U%__Y$S?=21<VESN[%553
MM6O06^\```$`241!5()A&!W=4PS#:)\PT3",]LZ)AF&T=4R0967IVV<#P)U/
MO&::IE8L$4*8N4L(D>5Q*Z[YMS "0SB$BFRMLJX]V&E]VK&+2G\=9TN[4@7&
M.?5<.QB_JCG"U8NCC9PIBV?DP#'3+Q-."]8'ODG/I'F*YY^JC]YC21S@:)
M0B*717XFXFL6$N\($?)TB^>72;2<(:2&H\LWC_"O!9%]GF%+YW2W-)+X(9A5
MH"O%+Y.D>F@SP6SC1@N2"2(N> Z<]L40*;AH3XLKCX-[_SSCACL/]<\SZ+:_
M!D8W```!`$E$051N0(A>U8EI&'JU6JT8U8I>':U6*G339D.O2KINZ%4`D!4%
M`+1"21YSWK9/F*BHFF$8G=U3Z+;,S.@M=W:9IEEJ[R2$%$KMLBS=_8N=U&8@
MA,B*ZC9W&2)S_8R035$]-3.RJ(&:GW9'2._61H+41Q,2.;NF&<H"B3NI
MM%;(B(TJGG.<(E)55.P%+4[KC),QNR$_YPBW!C)5L;=^8:D4YITI@F8M^H09
M3B<,Q:X'GC==[')I?IK9=+K^B4Z)]G`-!]S8EA&*9>K59&*J,CU=$CE=$C
ME=$1O3)*W;S$-&5)4C5-+10*I3)U\+9W=K=/F&081D?7Y(ZN2=3<+7=,1UNC
MM0```0!)1$%4N/)]IYNF62IW$$*T8ID04BB6Z/I212W0':VHN1MGSRIW9096
M;];JWPU5Z3B:9A_36881D@>&./*/5EPT8IY1CHB@TH'74<$&342\F AJ8]CI
MFH@'.(JX2 R2FOS%=TNF-PUE\Q80N'L50=7%B:;AZ/+-*1$F2YZ99*2'QH33
M#>-/EG*M[5^]YL.?O/FNC]]P^^5?6+UT^3>6?/:K;F,5G;?Q27Z;*Q&UN]>U
M=M\ST#.:7==%5CXD6'1@5B*IW- W]IBF:1JZ853U:E6OC%2K%?J4+R$F?<FM
MHFJ%0D$M3Y!DB3IXKU]Z(4W^C1^-]"=-NCFY>>UP<`=SVY?='91S:;-ZL`
M``$`241!5#%SEWIWO_?,8-AQP3T+%SEK3@AG6L\Q&,(VA\CI""[=$<_*?8[V
M`[ZHLUL#C'C2IQ-8B6W$_::+=C0\GL5[V<_AY6@)A2"3:H2%K'@6-(3%5(
MS!?]SVBQ"M%(2#2)4&MD)*2A4H2:C\/7,3OXX[[OL[<A87C$^T.4:$3.(G
M0>*3TD":R(B=4C<7^<E^7N+RI]%#L]F WL:?<*&L/H^*5(V6_OIH>N=M:K
M54.O5$='JY410Z_HU2I]J0\A1)(D^LJ6TO;']%E_IRJ:I"B*HDJRK(R]=+?.
M;R%J;O)^XQ!!_"C\Y?[*[$L:+47SD/?ZS+O;K-@ODO17R+G^G4%&F```!
M`$E$053>$:E_$:<+/\*L!Y97IY]-B$E]8*:AFX9A&@8A)N[&G :IO]S(<S5@
MVH7F#YMRR[),%%4%( 0D"<9>4JK(LE)L*QD=7?3EI<S<E669OM %S=WX>/K<
M$ 1!$ 1!$,0!SAAS1^JF+^J$$)(DRQ*1%573) GHJXD`@)JULJ)(DBS+2K%4
MK!;+LB)3HQ<`T-Q-%E17!$$0!$$0!&E*4C=]$4$D299D15%!DF5BFE:0K,BR
M#))E`FN:1@H%-'<1!$$0!$$0!$%"(3UPW[<;+0-"'_=E6('4O)4DF1FY:.XB
M"((@"((@2-- )_^&81B&H8_]1PC!9WW30")8K=G 8?A*8]CCJ A%7P```0!)
M1$%4/'C_[>^[9&DCI$,0I!G ,219\EZ?>9<_RV#=9H&\MT+>Y<\[]:G_!^^_
M_;WOO\PT35W7J]5JI5*I5"K4_D4;+0UPP7-6<!NZ"((@"((@"((T/<SI)<LR
M-7KIOC](LJ#IBR (@B (@B (TC"8W:NJ*OVJ*$JCA6I"T/1%$ 1!$ 1!$ 0)
M1^""39%%RW9_+[-[QVW_@R1'S?2EM4P__6+;?W7$="<,S(H>.#)Q! :&<,IU
MJ",G3\&B/<\ZK,!)83^[P";S:PM^&V6![$O8'#2DGL5'F_J4R$E%#Z+)DW$=
M3G!,XU\@^$GJ-G*V,B)5RF\XSZMJA,9U%Q0Y28[ ND7X!!E<Q7,```$`241!
M5/;0:)-D>PZ>C1X_"5_XF)$A2#\#I_U^^82U7/P0,78"H:9ON5P>'AYF=F]7
M5]?0D/72S>[N;GK@#K&'>P8B=AKC]?6<(;D#14+X!;E5/$[1@6<17^!0B.3,
M[^29NM0E-08A#F)68U*M$"J?9)N>Y1;-[HW9A>NCPQ%D2VE,$\DV0KFA3@UQ
MDTC#N2VW:(T;5E3QZ6,VP;I%`DEDG!31J\!L(R3A"!\_LEL`AS#L.%#RC$-/
M65558D/3- "@)C&-QHX)(2R0X0BT)T0H3M.7HY1\]75'$)0@U)S&,W*T<J,5
M';8OX8P-09J&)NO.T<:T"-F&ND>)-(I0^A#G?D0$Q4O7""2%```!`$E$051)
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M>,!K`.+8TN(A@H6Z8W(F^GZ1/7/F",8Y=TQ,\Q6F$_=P```0!)1$%4[5KU
M$\FON)CMPF\%D?KA*&JT0OU:D%]T*#7P'#'"GIUGDL &Y0OLQFWWBJ1RY. X
M6?=('F>>$2B&X^(2K10D*?Q:`>VH^&#=(I&IC]4JDL1QE:$'@:D\+RN.;#GY
MA)+*'4BB6B[UQ&W(^!DOS*SU# 2!ZFI!/$Q?MQXX%"41PL[)[(@GX5@RT8J.
M!M^RBIEMA)S=PPK?)@D40"0?D>0Q<8LJ.-U/5@Q[SK1I/$=A<7G<EQ;/_#G%
MA17;[Z=08H>ZA"3;"A&N7AP!_"Q>O\B!8Z9@@]:?P+L;3$Y'2-A)DF<2]TT'
M1RE(_8G6"O69FN<=K%LD`HFT9B):Q!FQ1:Q?%GWM8!<```$`241!5-GO5_%;
MI2V"9PWSS1QHO5H2(>*"Y\!I7PR1@HOVM VP=<41KRB1N7Y&R*:HGIH96=1
MS4^[(S3VUH8@]=&$1,ZN=88RG,0T#=A2Z8%UB_")IB%IW"[)B*ZZ;[]R!&N@
MY8)D"N_UWW8](%X+\^Q$F%RFMUXNO:)S45R=RW67$EAN=HQ2/ZA*Q]$T^UC,
M,HR0/##$D7^TXJ(1\XQR1 25#KR."C9H(N+%1% ;PTZ21#S 4<1%$B5:*Z!;
M4@2L6R0L235E?"V**0E'^<,Z`]@B*9%K4$S+I;'D3N LD_PV5R+]@7BM67<'
M>D:S-[_G6HOTB@[,*EH^D>&<B&?'CG!GRYVZ.=*D```!`$E$051/M+/F"Q8H
M7MCF$#D=?CT$UI+(.=H/^*+&K]7 XAS#O;@:1$ON)VW87A!!9K_JY?3WL +$
MJ83XB"TBI#3>V<87)HV[.=GI"XX)3."L(_#:BKBIF;YN90T\MH?XA?OA-X[S
M0T1*L2M*@D7'ER=9`L_.WBY^=>)NNVAG%*%=/ L55$+/_ 63BQ?AEY"C8")Q
M`M/&"1'4"L$(@:<CF"I06G=RD::/T#31U"#"4!"M0OS*XL<,E7]@SDEI7:@J
M%1R3D9@T2A_B:P@G,$=@W2)\TI@VNT/BA%8E< ```'%)1$%4)PFK0J'RCZG2
MH6HIVD733;(NV3CS1G<@=FTWJ;_<R-/WF':A"!(-3Y\;@B (@B (@CC &6/N
M2-WT19U <@2J*X(@"((@"((T)?B:8P1!$ 1!$ 1!$*3)D1ZX[]N-E@%!$ 1!
>$ 1!$ 1!4N3_`XW]UR/Z%RP)`````$E%3D2N0F""
`
end
|
|
Posted by James Matthews on September 6, 2007, 4:57 pm
If you were Registered and logged in, you could reply and use other advanced thread options
hmm I have never seen it! But i would jump to hacker right away!
--
http://www.goldwatches.com/ http://www.jewelerslounge.com/
>I have seen one specific box in an environment which I tested which has the
>IUSR_%MACHINENAME% with ADMIN rights. I have included a PNG file and if
>this is blocked I have added a link.
>
> http://www.spisat.com/images/aa.png
>
> Has anyone seen something like this?
>
>
|
|
Posted by Roger Abell [MVP] on September 6, 2007, 7:13 pm
If you were Registered and logged in, you could reply and use other advanced thread options What is your actual question.
Can the Iusr_ be made member of Administrators? Sure.
Is it that way without someone making it so? Of course not.
Should someone do that? No.
Have I seen someone do that? Yes. People that do not
know or have time to find out why something is not working
often "cure" the issues by granting admin, and yes, I have
seen an "admin" do that with Iusr_ before.
Roger
>I have seen one specific box in an environment which I tested which has the
>IUSR_%MACHINENAME% with ADMIN rights. I have included a PNG file and if
>this is blocked I have added a link.
>
> http://www.spisat.com/images/aa.png
>
> Has anyone seen something like this?
>
>
|
|
Posted by Mervin Pearce [SACS] on September 6, 2007, 11:35 pm
If you were Registered and logged in, you could reply and use other advanced thread options Thanks, I believe this was a server rename and the IWAM_.. and IUSR_..
accounts made administrators due to some things not working after this
change. I have another 52 domains in this environment which this was not
the case and a single finding was interesting.
The question was just a global, have you seen this with some of the security
reviews that we are performing?
Best Regards
Mervin
|
| Similar Threads | Posted | | Re: Anonymous (NULL user) access to a Share | July 30, 2005, 11:21 pm |
| anonymous user | November 18, 2005, 9:44 pm |
| Restrict Anonymous access | November 5, 2006, 5:05 am |
| DCOM - Allowing Remote Anonymous Access | January 28, 2006, 7:46 pm |
| Allowing outside users access to company Intranet (anonymous) | January 16, 2007, 10:39 am |
| Allowing access to admin$ on NT4 -- getting "Access is Denied" | November 17, 2005, 12:01 pm |
| Shares, Named Pipes, and Registry for Anonymous Remote Access | February 23, 2007, 2:24 am |
| Question on - Network Access: Do not allow anonymous enumeration of SAM accounts and shares | April 3, 2008, 9:48 am |
| restricting admin access to network | September 15, 2005, 9:25 am |
| Local Admin access through Active Directory | April 6, 2006, 7:43 pm |
|