[26134] in bugtraq

home help back first fref pref prev next nref lref last post

Popcorn vulnerabilities

daemon@ATHENA.MIT.EDU (bugtest@sitoverde.com)
Thu Jul 11 21:08:44 2002

Message-ID: <3D2C186C000AD328@mail-4.tiscalinet.it> (added by postmaster@mail.tiscali.it)
From: bugtest@sitoverde.com
To: bugtraq@securityfocus.com
MIME-Version: 1.0
Date: Thu, 11 Jul 2002 21:16:49 +0200
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_00BF_01BF610E.1038FD70"

------=_NextPart_000_00BF_01BF610E.1038FD70
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit


######################################################################

Application: Popcorn (http://www.ultrafunk.com)
Version:     All the version, because it is no more supported (however
             the latest is 1.20)
Bug:         Multiple vulnerabilities
Risk:        Remote DoS
Author:      Auriemma Luigi (e-mail: bugtest@sitoverde.com)

######################################################################


1) Introduction
2) Bug
3) The Code
4) Fix
5) Philosophy

---

1) Introduction

Popcorn is a good, tiny and easy_to_use mail client that run on
Windows.
It is really minimized in its functions (you can't send attachments
for example), however I found it really useful.
Unfortunally now it is not more supported so its development is
stopped and every bug found in it cannot be corrected.

---

2) Bug

The bugs I have found in this program at the moment are 3 (however
I will not publish other bugs about it if I found).
The bugs A and C are exploited directly during the mailbox checking
so the user cannot see where is the error because the exploit mail
is not visible, and he must delete it manually or from another mail
client.

Let's go:

-A-
-Process freezed and resources consumption.
If an attacker send a mail with the following subject:

Subject: \t\t

the client try to read the mail but it seems to don't understand
this subject so it remain to download the mail.
Instead it is freezed, the user can close it from the menu
without problem but the process is again executed and it eat some
resources (for example my AthlonXP is a bit slow) and the only
method to terminate it totally is from the CTRL-ALT-CANC menu or
better from a processes management program like ATM or Killprocess.

-B-
-Buffer overflow in subject field.
The client can be crashed when the user want to read a mail with a
subject like this:

Subject: (at least 490 'A's)

I don't think that I must add other about this problem...

-C-
-Bad managment of the Date field in the mails received.
This is an example of how Popcorn reformat a Date field:

Date: 1       = 01.01.2000 00:00
Date: 11      = 11.01.2000 00:00
Date: 111     = 20.04.2000 00:00
Date: 1111    = 15.01.2003 00:00
Date: 11111   = 02.06.2030 00:00
Date: 111111  = 02.01.2032 11:03
Date: 1111111 = Crash!

So the attacker can crash the Popcorn client sending it a mail
with in the Date field an year greater than 2037 (2037 is the
maximum date that don't crash tested on my PC) or as I have
written before, with 1111111 (or other numeric sequences that
crash the client).

---

3) The Code

I have attached a simple and tiny exploit that can send a mail with
one of the 3 exploits I have showed.
The source and the exe is only for Win, because Popcorn run on Win
and then the exploit can be emulated with Wine, so why lost time
and space (the attachment) for do another version?

---

4) Fix

No official fix (program no more supported) and no tricks to fix it
temporary.

---

5) Philosophy

I'm really hopeful about the full disclosure, because with that
"everyone" can know the real effects of an attack, the real danger of
a bug, someone can learn a bit of programming (I have learn a bit of
C from the source code of some exploits) and it's useful for all the
people that are hopeful in this type of disclosure.
No secrets!

---

Any type of feedback is really welcome!

Byez



------=_NextPart_000_00BF_01BF610E.1038FD70
Content-Type: application/octet-stream;
	name="popcorn.tgz"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
	filename="popcorn.tgz"

H4sIAAAAAAAAC+w7C2wcx3VDipbuTqTMxoqrBLI7YijrKJ9O96UkWifzJJ4ixvycyaPo2KKo5d0eb6m7
3fN++LGtVC6twgR9llIXSGMYRfwJigJua8QtoDgpoERObCN14qBFHTeJkaJpe66U1gmMWnZlX9+b3dvb
PS4pybAdGNGC7+bNm/fevHnzZnbnw6JUTEuyuJ18hE8gEAnsiEYhDQR2dEYwDQKJ5Y2HAEMwHAp3RkIh
EgiGopDQ6EdpVPXRFJWTKSWaeFSUZsTl+S5R/gl9ikb/G6k//RHUAb0d6IxEluv/zmgkavR/ZyDYif0f
CUfDhAY+AluWPL/j/b99a4snqfc9LXBCnqbzAi+qNC1zSo6XaVGWpOw2+EtLYpovqi0eL5fP02leVgRJ
9NEJPs1pCk9FiRYkmaeKVixKsspnOlo87ok5GtdkgS8UONqnCZMC9fLbsJYuOqFNqryidiuCKoGyDO9P
SwWQafGMCmJGmlGqVegkNUfVnKDQvKCqeX6JVZQTKaeqXPoomJyGDD9bzEuCqlBFKvBYmdLikbKgg6fV
1uoN9bd4UkDk5EmtAFmFqhItcgpLkVtTBahzDhh4lt8vSwWaFfh8xsfyKcnX4pnJcSod7k8lqcLLYDed
4cCF6BZOzDA2UStMAN0wQTfVj01r8fQJojZbbW0XlTWR8fCzPJ3BdoM/eOrNqWqxa/v2mZkZ/wwQcneb
/tq6HX8/J4jpvJbh6W5FzQiSP7fHSgMRRYIa7VRFlQVx0k5sQ75xXpb9uTamN8Nn0YD+4c8H3W3D2sQU
n1a76CH1kNpmKw1ZSg/w+bzkozlphvltTtJupb1bCnRSgvrQsyy6kO73+0GNe/tW2ktz3DRPwVAew4dy
NC8Bs24jdKPeG4rev1tU8DRPt8S3KKCBclkV6IJK0RcWm8Luth5O5btoUH+MqiSZZgH4Wa5QzPM+ajCl
NMADQfoFLU9DgV27AO8Kw1+A3hwIBQJt9dpD+w7c6QYTasS9I/v3D/femXBHA516VZFdAaMuFo80RG+m
NT+1QW5f3+BwoieeitMYBTFbJan+JFMX3BXS1aEq9IPMp3lhGr0kKjMQOSzOqoUsECE6CkBUbPoGb4M+
DIUCbajrQKJvsK4U+jAU1UsHb6srA1+GoxFWxqy1l0ZQb5CV3j7Sm7KVYkXuNlbd7CH5kGiJG9QEfQS/
dQWmV9xtWILgr2PBetxt+GsUtHimJSFDlYJaHFd4MePVREWYFMFL6RxM8VsntGzWR+uI0tGOW1DURnar
hSJy32V0wBiwCKLqVnLgUogY6AwYIUwOyDhvil5EYBZJ+wzFgE/fNdZB7wVmhVdBnRdGpqSpPjow0teH
tbqLENtq1tt2SFxhCoa2MWYh60X9dDeN6lot4iMKNwkRvFmhu7MwQXXvobtVCX8xFsb1SQly+ryzB/yJ
/nK7qf60xRm9q44apNtoUpbSPMyGWZnn7wHvxGhtCoA5AP7sMiGQ2Quew7kO6szmYQqwyMBw8MY76mTC
IIMj0JgV2BOjtoELEj6LCPNtYIy5xc3PCqo3yPBj2CPu0eE4i9AZhctwKocFMItoaeg/mNu4TEYeF0Ra
5HnZUpSTFBWc7t6aKyLVHg4sFqqDe4z1u7vAF6BbvXpQBWYDAZ85/JktRrkRSVUWI6D0mHMrMMGnc15O
lQQva1NkrMPo2zQHb49gF1WMTtaVtG1WNittPjYb+2qDpOMWOiHz3NFbTMlQl67GbqYxadUsBc9D+/O8
6K3p0r2KguninEXQV2XFTJULSGmuqt5iDxYeW2JVeIX2hJdrDwx3Tsur1QbVgj4hy5LcRUdlfE+oc0Ue
X696iFfHjC06MDxqITIMn32qVvT2x29LjA4O9XhDvkCHj95kRE11yMFMo45jzOgdFIYRHYvR3oF4T8/Q
+MDgQIL1F617ckWI4ElexaiamBO5Am+KM0tAMbLEaKCDVl+43m3MzHpVfB4ch8HqVwSRWQKqt3q9etzS
Km1rR664bU+OZaxqjl2ORr9SVby0uWyeqjLjpx1w5VRJVLy9yeTgUGocpxg7V5YrCPk54IvvH+8dSKSM
YNcnTyBjiyEmjVIfHR7cd9v4cGooEe/3UdA6NJgaHE/t07Wa7jHkGRHyoAc+/kSYVqolPlp1SnWcg1du
QqsgdIV7eCnrxUyHXS1AdTSaL442CEl4V+qMJhXfYEgP6XQjEM0B3tYf7+2j+4cG+7vo7s3KHvZW8ulz
VXCsTpcptby6oX3JFE0NLlUWurQyswhHE9LDdfTl+PF1ivSI4ZPqaOvH9xJywJSoaGl8J2S1fH5uU3Wk
ybyqyaI3gJljH/xdzAa53rtMzOxaXcCYgTADYzXg0JPUlIdvpOmavOkjYwZ2ltbH/CaoBv5qfgXDlrxy
jdlns8I6xmB1eiPB3297kbfCU7/+h2XHh14Hrv+X3/8JdjIc1//haCgcDOD6f0cgeHX9/3E8/XeeIqsg
bQKoVAg5bdC7L0P2OMC6P3huHflb98ubTjf0vbwphWt0WJxPylwB12mipNIJnq1p4ZOrZ3CYFiRY6re0
eNoNHckEIX0NTeSlf9oWq+r9BVnXsLahYRXBgbMOoJGQH/wepK0A1LCuVac3GDJNVeFkLbOK/bbqvGZq
JmZDN6y6jMZ+yI9f5WdVSF9x6QaxtMnOQwk54p9QFMRfMQhOz3FCzvjxowXwr6GegJGus/N1I5+gM7I2
dxvpBjvfEeD7gM26+nzCnuCZ7sW+9qa3402rIadeu9jT7lpMtbcuNJ7GyDg7fHAUSK3JqfdzpLWbZCps
Uz6zsBkTKKGLd7gWi83z71dUeova3q5+thSZXmx+FpS6Fg80z9/3bBPRXq2knnWd+3Hm5DUoNf988/jh
u86OLPw7KB+ZIlMk9yeguqK5yk+sIWQMChfOj529CAzz513IszjWvJhwPRkIdJOFGyLw+3Y3M1eTFxIX
FhOtC4mLTyK5lLiwsO/iotK8eK8LLZooNU/P33eyiahdB0dKR1srqZNNY4dBm/uM6p0NAtdwWatUKvPP
N0HpweHyOpZxgdhi08nFfc0g4AIuzEdOnns6eObc3ahnqjJc/rf3kbV5irxwTStUvRbMmVpb7l+D7XO5
z2ibqiU4EKdc5bBZsuY0TlrntsxfqKhbk5UoMpXX68VG7r9XY66JMVb9MR/zQRGpipcfx+zU2sov7tAJ
r2YeR++C16YquY1QlnsUvJo0umr+fCt4coEvJ1/b3Z69v7mdrHrN1w51MP97kb0dfyhWvwWqr0SRWIm2
s18kL2xej4VzjWjbhuBLC/0Xk+X1wPrSWYiIJ7GWs1j9wdH5Yy5ybakPGMtPQ5fH1m8h5NqHNkE+VgD0
D9dU2k+UH7mVxN7ZigUuLLiI6Mn3oClQ+O0Tt5JS7N6d3eSNXwOlFDuK6H8w9IuI/pSh/Yi+wtAgot9j
6A2IPsfQNYj+DUN/tQPQpxj6I0S/ytBnEH2YoY8gOs/QP0J0lqFpRAsMHUR0gqE7ER1l6I2I9jH0Yieg
cYa+jmgnQ/8a0ZsZ+hVEKUNnEf00Q3OIehh6O6LwFsYGIfoWQ1sRfYOhb0cBfZ2hP0f0Hxn6HURfZOhf
Ivr3DH0Q0W8wNIvoXzD0dkQfY+geRL/M0I2I/jFD3YCe+xK0JgLpdCl2DlOxFHsV02wp9jymh0uxv8P0
YCn2OKYDpdgipvtLsSlM95RivZh2lmKbMPWXYpUwpDeVYm9ieiP0AqbXl2J/jum6UuxuTFeDxyEdzY3C
b/mnMAVNNZSfWWVMGmM4adx//muQh2npGAy+x5PxbjJ/hibLLwAxtwulvq6zQxBec+z6yo7cl0NAPKWr
4vWy3Lvg7ilSOvG/71UqyfIkyp7BcUpyrRS4DwKhMtNa3srYN85faFCvm7/QqAbnL6y69oGHgJN5MzcL
qnPH8ech+KmqSzGp1jf+DP3ZgjzzL1a6j+9uINo7z2HNHd8dmopXuf+LjafmUkvcxpjMxS0qv6kzsQqr
tHcYzXUuopsRrjfjZVbeem597tPogYcbmQfSulTpxJGLwDTVWL6+EdvaXP4+GAZTkubHzBuQWTjxJuiB
CcszVSm3A/cXz92wyGiL3c2LZJEsJN46txa5F5E78dbUZ8oaYNmFxG+yLyTebCRTq6caoIZTQHySgF+T
5Z//X6Uy1VpKvAnzHlLKOCKfbGJl34GyXCu2Yj3a+wg6eBVm12D2AYJmNuV+Hew2OulXDVUGlk0zBlfu
X02Gf7Az7EWF/4yl/wI/5XBVf9VfbUj4AZb/CMuvw+wziKXQM88fCp4ZP/zSWTbBLR5zLbxT66spkhw1
2oN9ztpTieJv+fy77PUypccXM8TgnKjj/K7OWdGadXNvYrW65i8QbSOj6GPiBfYGdUFPfpVhTTgsoOWb
N8BIOHUKZ+HK5o0WnFrwdgvuteA+Cx6w4BELvtOC91jwlAW/w4IfsuBHLHjGgucseN6CFy24asFnLfh9
Fvy4iV99rugJYCi+AsAWc1fwPPop8Ph6O3y9jvYM5L/lwGeF7xvlP74EnxV+Brz/CfAbgPcAXNd1k+sA
bgToAIgA3ArwBYARgCMARwGmAe4HeAjgKwBPAPwVwGmAswA/BHgN4JcA/wPwLsA1UF8rwAYACuAFCADs
BOgGOLAe56vLt/1yIAlwB8ARgCLALMBxgAcBlt2I85BQKEhw/67FQ8LRCMGtP0Bt24iQr9ulBEooGiD6
6RxmQrB49Kywte4htpMZ8sEOfQluEfqhPlPc7SZ4GEA8V3aW5fEYh1eeSx1XqYdUz2UdT3ku40DKQ1a6
NeExPbhZ8ZARfeeI8kgiB7m8kKF4JODDSxO4GsetSknOoI9l/m6NV/D8G71OBiRx2xAUgq3cRJ7XVShd
dP/gUH9iaMhHhxL7R4YTPT46MJjq7U8ygbim5iRZUDlVmObpAUlRKe7DZCVNzJC6bEqSoAHiHM3z03xe
0U0oSCoexNMip+agg6pBRvHUJBUfSo0kmYY5XqVFcKIkF/gMGe0dwH182tPXRw/qlxmopKlMIydOQlt4
dUaSj6K3h+egiQUqKFQTuWnwHzaODKscNHFg/zDNCoDoO7ekR1DS9HZNAjclZtM8D4FfsxrvAyi1bFHv
fl4BKfCpKslzzFK+UFTnwDd0CCziMRbRDbovwIgM7uvtxzqxW6BYYncPnJyjzBUmpLyQpnlBPKqQffoJ
BLZV5rNgTcZKUgVwDDqhpgm4eJkXwUpf9R5DEdTxZJ9xqUHMGLcZ9EMSquQ0ldk3rOfBXGyRcfQB9dXo
XF7mucycpQxaPKFHu1Lk0jyt+dpmuALyE3PsSAjUZdUZHL/sWk+mqgwZuQlJVrEbaUaWikV7oSTrisxu
Zp0LBqVzrEILmTVHby+n4AGAJerx1AZ6kMT11GwTRCOYY5KNEyb0hHnhiDVBllQpLeUNBpK05+0CZBCi
l2PW2xUBQfd+1blsBrTLmprt5L1cpmaEVETlNdaZ2nSKdzWMOvqhQTDj1cKuB1whiLphhj+YhyCkze6W
TNOZ9eI2Q1mtSRbPsQ1Z9Kq1wTPLlMxIWh58mQd9tbCF6kQ2KhXSK06zGax6Y4p62SavIGY6WOurPZjk
5YKgsGkgw4uC4Rs2svXLUKAJ4lzWiuhyRZ8R0lw+Twiu6a4+H8/zVHcN/1NYIW2IE/KKhfY80HqA9jML
7Sd7sY8+JgPheRDqOgXwGMBTAE8DnAZ4Ee0COG+x5YIFbwI7mwE2ArQD+AB2YnvQfoA7ADIARYD7AB7c
+9ur003YoTpZS8wjeNJK8AyTkOsIvhcI+X1ijHJ4PkNs1wtIB4G38+d5tY9TVPbtATzbSO2eAyGrSRMx
JmxyeM26xiE1PyLOwLglL5BxQZrAY4DxcVABn5hiXJ5UyLsNeDMFJBvxRBPsb9QvhRDSS4Ya9ZslaMto
o34sinUcapQ5AWbqdKN+6Qlp2Uac5TkY2d9cIzQqVWZSaNSvjxByDbmvUT90ZfqGQ+PhkB++JCDT3X1J
uC0xNJDoMyVc64G2bygFOZ3ihfyVQthFyABB6/cANsawHhdaili/C32A2LhZypulImCDDFNc+oHUavIl
k+8Bk+9hwG5n2COAPQrYevKYyfeEyfcNwGIM+xZghxnf90y+H7r0g6PV5CeADTHsdbP0l6aWNW5CDjKs
GbBvMy2fcqO/qRG7LMXDsc8aGf/K4/Lq88l/quf/tWu/H34dl7r/Hwyx+/9Q1hmK6vf/o8HOq+f/H8ej
X9OpXoLBS6x4EYZddmFXH7eyJad+GUjI4i0ZuhtvrbHbMMb9xbo3j9d+hxF6ONKlr1xhFd22zFdf25LL
gii4yyJY9/noKBAMWwSWfIE6i0Tq6jA+YB2ZQyFbS5b9EnYWttbk8GntKBSOWoQcv9KdxTodxeo++51F
dziKOqwnnMV3WsRXXq04y1v7fKWlkKN0JGCRrl9ZOUsErSGz4lLNWT5UFz91yz9nobBTpbalpLNcZKlz
ly5OnUWdA2mZla+zik4nq52W1s7i1sC6wpW8s8KdDgrtOwbOctYQW3kjwlE+ag2yuo0NZ4Ggs4Blg8RZ
LmSXW2njxVlB2BYvK2/tOGuwRtxyu0bOktaAW3Ynylm0c2mYO21wOQvvcBS27Zo5C+5cEhbL78c5a9jl
NMMvt+fnqKIz4Oxvcy/RWSq4XC+xTUlnmZCTscttdTqrsIbX0g1UZxlrQFl3YJ2564LItoHrLGGNHYdt
YGehHU6+MLeTnWV2OsmwHWlnftuLbemutqPQDms4OG6QO4rtcppwltt4d9ZgjY5L7e07a7DNPZd3iuDs
g+DKgWo/sHBQgV959UFnHoE489sm3kucqThrCNdpuJJjHGeN1oFzJadINm3mf9OYqmzHUzbeYyvdeGfs
n7z77lcf+2O5/7+Ny0xvgxD3q+xm8of3XGL9vyO8w7z/Hw51dgJ/NHJ1/f/xPC2ez31ID24RxIv4ZcPd
Ay8Ivsv8T3vrP6/D3CNzWXCm8f/rxusEuPFJaSrM5DBDGv8OL+CsfrfGifDGF/LV/ywocLiIpPwWWhS0
LfX/4GYsIzgQ8UIdmghzIc1vgYoFEDQU8yid52jQHwp0+Fv+v52r6XHbBqJ3AfoPTC6ygfXCXictsJdi
47ZA0DTIJkHRKy1xbSKS6EqWke6vz3tD0pI3yaFogV44h12sTZHz8WbmUWGYvRp2t+MUfwx1y1LN//qv
C9Xw2UNt8uw92vbeujD0Z/fBNx8HywfQDBPn+Oe3HvyXUfjg2V9/m2eruXrdHjtXDRKTPLuZK9iaZ2t8
UYMQVyCiefZirn61n/PsJX/XrncPVnOmxWLBX1/NMt4ZATcOLexy8UIFVVl1QH/U7OoqXOZw5YNVYkPn
lAGtboQBo2/lmdyw8PiIjQni8EuBz05wjVOdrdwRQdS1amxrGyCgrWx/MG3PyBg1w2bbcCorlKDUiLJt
T/irsnmm69rs0K7nagSBUzDi5M5LcGmu+gHs4whGdNR8j2Om6JrCqXS9LYjDfnCqP9maX3Eg+D3Ug1/c
DpBFkGUdPsKZDoMrFHkkt16u6wysuvbe5c8YkTx7LY+We1A7d55BEgCYcRP007NQo3FUF6o4UID1iPY8
47LA+GHYbuHnPWwt4MdjZ+F6kO0TtLF+ha41xL9f+g6x2fjpwoUFkgPwJ5UOzqkGcD7yrZqqlp94uqcy
dY1QEuRb9/lKFAxaIz0sXI4EPJ59Kx45gfTCI0hCOUFjCBxs0HoDr+wG0z7qcWypD1BBNFe9ZaCFfhgl
n3WaI7DBghLjjFSnHXTttWbQiVR6wT2Fqo/GHRZehBNETt6tlQyAEa0GBJhWGuCyB3kT2BiZkeePSu8S
oI+rBJPwnKDF0Jwj70bx54wkR6fnkuQigfMhIsSZRLHgFRhmtxMnFUZmROw7VLFOLJabTaKWVhQxPaIA
qybPSeURbDDv1CRnRDW5rqSVV6Q9r3HBT+ifZ7BSXCPgaE+mNKEAe+8A9FSEAY4qXI0x9jHb20EiHEoF
FNM+dRCRgVtrRBgTghA3lpZZ7lcRH108XQqxdZ0MMAKP0tchZQRojKJkKmqODxU2Rqwb5dCew3VRLehJ
y6J93GOf+uc77GIQ2RbP6+0WRmmqdrK9BfoFPnMlLaS1JQGNybnuke+XWyAOlvFKCgughxx5oj9aXmP9
x2I7gKQ2H9+/Wdy9+bjY3L3dKCjTmF0N3YKtHq1jysPIHV+G0uzK2Dg9stiiBt19/B0Iz7PfbF2Hbzym
XxHTT0+8tVi+1A2eCyhkjC/PsGnputUkb0vTlaKGxo6gM5coh6oB3AgOkeaT/xLpM8lFJ3eiFHeFtL23
zHBUdKSklcz2+Qnr9W5nh5Yovr72tmwWoiYLFXzaMtunPok2yck9n6qiX4dGc4IRmOTelyTfsyIYpOw0
471A3Ikyp6XAnWcUU8IRQBWPBC5X10syiOVSLZe3y+V5xCqOWH13xCqMuFleL198e8QqzPEyzLH+esTK
63FzvfwBI9bfmIND/AjOsb7Bh7fL9eWIFUZsGPZntPJ+YKN9UtokpR/AlD08xrQ+N/OAfJZAAIc3qkSA
8Maj7RbBbS+DxBVaXhzFWLOaY1Wo+KOayU8DalcXYQSgjgrMqVis+AbTB0hOaJJTsQj2gyS2ereZK+ej
uocm4AylfbBSJw8sW1cqkg5CPPpg5qrYITSs+iv0oKExgBBKIhcvO+ReXHc+NvFLOsWSqQIBgR6FB9yZ
9ZiRCoVrgTj1ZfMYeRFVHLjHx8rriyf2LEY9tBU+cV5fapVh17HCk7B6z8UCH5tQ6gmJC1/mGduU8ndS
YZaw2pTCGNBhmhWLGu+nusKMAhpMA80K8Xkr1f9oGG/D974o2mqGiAbHzGVReFRLOSm84yNB/2l0bmSn
KBe+PfFFT7lXKGu2tHwnNvve5mBC31jDfXvLswf72SsGKmOmZOwpAX4d2FVkjA+2GkqL71FWdoPuWCG1
4glsgLcv8eTQmegFKY38N6g8e85uSG72PDRHTNqX9A8rlKENBkWafHeaemiq8fs8OxCHDKQfgTpIt0ub
c35W9A4CqTnozvsU9KaQ/hh9E/j7zJ77I0itr54b7rsAKf84a6i2HlGozK7bIb2t1H8+B4Idr1iDXyux
UuoqGbXvjtjK8fnadT5vxY/Rf3bktXkmLayyFx7sHDI15HDD2u1DTzIFLuqejSG7hwvQOWIrxDwPxlRb
XX6iQlsD8tIO4YlXf5tHf+va/73vTpIkSZIkSZIkSZIkSZIkSZIkSZIkSZIkSZIkSZIkSZIkSZIkSZIk
SZJ/K18A38jPJgB4AAA=

------=_NextPart_000_00BF_01BF610E.1038FD70--

home help back first fref pref prev next nref lref last post