<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:o =
"urn:schemas-microsoft-com:office:office" xmlns:w =
"urn:schemas-microsoft-com:office:word"><HEAD><TITLE>Message</TITLE>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content=Word.Document name=ProgId>
<META content="MSHTML 6.00.2900.2802" name=GENERATOR>
<META content="Microsoft Word 9" name=Originator><LINK
href="cid:filelist.xml@01C61052.6933C140" rel=File-List><!--[if gte mso 9]><xml>
<o:DocumentProperties>
<o:Revision>1</o:Revision>
<o:TotalTime>24</o:TotalTime>
<o:Created>2006-01-03T15:13:00Z</o:Created>
<o:Pages>1</o:Pages>
<o:Company>Chillicothe and Ross County Public Library</o:Company>
<o:Lines>1</o:Lines>
<o:Paragraphs>1</o:Paragraphs>
<o:Version>9.3821</o:Version>
</o:DocumentProperties>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:Zoom>0</w:Zoom>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:EnvelopeVis/>
<w:DrawingGridHorizontalSpacing>3.9 pt</w:DrawingGridHorizontalSpacing>
<w:DrawingGridVerticalSpacing>5.3 pt</w:DrawingGridVerticalSpacing>
</w:WordDocument>
</xml><![endif]-->
<STYLE>@font-face {
font-family: Tahoma;
}
@page Section1 {size: 8.5in 11.0in; margin: 1.0in .7in 1.0in 1.0in; mso-header-margin: .5in; mso-footer-margin: .5in; mso-paper-source: 7; }
P.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; mso-style-parent: ""; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
LI.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; mso-style-parent: ""; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
DIV.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; mso-style-parent: ""; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
A:link {
COLOR: blue; TEXT-DECORATION: underline; text-underline: single
}
SPAN.MsoHyperlink {
COLOR: blue; TEXT-DECORATION: underline; text-underline: single
}
A:visited {
COLOR: blue; TEXT-DECORATION: underline; text-underline: single
}
SPAN.MsoHyperlinkFollowed {
COLOR: blue; TEXT-DECORATION: underline; text-underline: single
}
P.MsoAutoSig {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
LI.MsoAutoSig {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
DIV.MsoAutoSig {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
SPAN.EmailStyle18 {
COLOR: navy; mso-style-type: personal-reply; mso-ansi-font-size: 10.0pt; mso-ascii-font-family: Arial; mso-hansi-font-family: Arial; mso-bidi-font-family: Arial
}
DIV.Section1 {
page: Section1
}
</STYLE>
</HEAD>
<BODY lang=EN-US style="tab-interval: .5in" vLink=blue link=blue>
<DIV><SPAN class=115061616-03012006><FONT face=Arial color=#0000ff
size=2>Interesting discussions this morning on the list, I would guess that many
sites are wrestling with the issues of installing an "unofficial" patch this
morning. If you're interested the patch and the whole WMF exploit issue,
they have been discussed extensively on the SANS Internet Storm Center, see:<A
href="http://isc.sans.org">http://isc.sans.org</A> for
more.</FONT></SPAN></DIV>
<DIV><SPAN class=115061616-03012006><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=115061616-03012006><FONT face=Arial color=#0000ff size=2>-
Brad</FONT></SPAN></DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV></DIV>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left><FONT
face=Tahoma size=2>-----Original Message-----<BR><B>From:</B>
oplintech-bounces@oplin.org [mailto:oplintech-bounces@oplin.org] <B>On Behalf
Of </B>JKENZIG<BR><B>Sent:</B> Tuesday, January 03, 2006 11:15
AM<BR><B>To:</B> Bruce Landis; OPLINTECH@OPLIN.ORG<BR><B>Subject:</B> Re:
[OPLINTECH] WMF Exploit Hotfix<BR><BR></FONT></DIV>
<DIV dir=ltr align=left><SPAN class=839521316-03012006><FONT face=Arial
color=#0000ff size=2>The patch is from Steve Gibson who is one of the foremost
and highly regarded security researchers out there.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=839521316-03012006><FONT face=Arial
color=#0000ff size=2>Jim Kenzig</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=839521316-03012006><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> oplintech-bounces@oplin.org
[mailto:oplintech-bounces@oplin.org] <B>On Behalf Of </B>Bruce
Landis<BR><B>Sent:</B> Tuesday, January 03, 2006 10:43 AM<BR><B>To:</B>
OPLINTECH@OPLIN.ORG<BR><B>Subject:</B> Re: [OPLINTECH] WMF Exploit
Hotfix<BR></FONT><BR></DIV>
<DIV></DIV><FONT face=Verdana><FONT size=2>
<DIV class=Section1>
<P class=MsoNormal><SPAN class=EmailStyle18><FONT face=Arial color=navy
size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-bidi-font-size: 12.0pt">I
trust the Oplintech listserv but a basic question remains for any volunteered
patch… how do we validate it?<SPAN style="mso-spacerun: yes">
</SPAN>Certainly a PCWorld columnist would appear to be a reliable source, and
the hyperlinks trace out ok, but…<o:p></o:p></SPAN></FONT></SPAN></P>
<P class=MsoNormal><SPAN class=EmailStyle18><FONT face=Arial color=navy
size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-bidi-font-size: 12.0pt"><![if !supportEmptyParas]><![endif]> <o:p></o:p></SPAN></FONT></SPAN></P>
<P class=MsoNormal><SPAN class=EmailStyle18><FONT face=Arial color=navy
size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-bidi-font-size: 12.0pt">I try
to teach our staff not to download and install protective products simply
because they pop-up and present themselves to the end user. Do others on the
list have additional validation of this patch? Or…if anyone on the list who
has an isolated lab machine were to do the patch, watch for rogue processes
and report back it would ease my mind – somewhat.<SPAN
style="mso-spacerun: yes"> </SPAN><o:p></o:p></SPAN></FONT></SPAN></P>
<P class=MsoNormal><SPAN class=EmailStyle18><FONT face=Arial color=navy
size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-bidi-font-size: 12.0pt"><![if !supportEmptyParas]><![endif]> <o:p></o:p></SPAN></FONT></SPAN></P>
<P class=MsoNormal><SPAN class=EmailStyle18><FONT face=Arial color=navy
size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-bidi-font-size: 12.0pt">Paranoid
as always, <o:p></o:p></SPAN></FONT></SPAN></P>
<P class=MsoNormal><SPAN class=EmailStyle18><FONT face=Arial color=navy
size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-bidi-font-size: 12.0pt"><![if !supportEmptyParas]><![endif]> <o:p></o:p></SPAN></FONT></SPAN></P>
<P class=MsoAutoSig><!--[if supportFields]><span class=EmailStyle18><font
size=2 color=navy face=Arial><span style='font-size:10.0pt;mso-bidi-font-size:
12.0pt;font-family:Arial'><span style='mso-element:field-begin'></span><span
style="mso-spacerun: yes"> </span>AUTOTEXTLIST \s "E-mail
Signature" <span style='mso-element:field-separator'></span></span></font></span><![endif]--><FONT
color=navy><SPAN style="COLOR: navy">Bruce Landis</SPAN></FONT><FONT
color=navy><SPAN
style="COLOR: navy; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoAutoSig><FONT face="Times New Roman" color=navy size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: navy">Technology Specialist</SPAN></FONT><FONT
color=navy><SPAN
style="COLOR: navy; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoAutoSig><FONT face="Times New Roman" color=navy size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: navy">Chillicothe and Ross County Public
Library</SPAN></FONT><FONT color=navy><SPAN
style="COLOR: navy; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoAutoSig><FONT face="Times New Roman" color=navy size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: navy">(740) 702-4115<SPAN
style="mso-spacerun: yes"> </SPAN>fx (740) 702-4118</SPAN></FONT><FONT
color=navy><SPAN
style="COLOR: navy; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoAutoSig><FONT face="Times New Roman" color=navy size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: navy">landisbr@oplin.org</SPAN></FONT><FONT
color=navy><SPAN
style="COLOR: navy; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><!--[if supportFields]><span class=EmailStyle18><font
size=2 color=navy face=Arial><span style='font-size:10.0pt;mso-bidi-font-size:
12.0pt;font-family:Arial'><span style='mso-element:field-end'></span></span></font></span><![endif]--><SPAN
class=EmailStyle18><FONT face=Arial color=navy size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-bidi-font-size: 12.0pt"><![if !supportEmptyParas]><![endif]> <o:p></o:p></SPAN></FONT></SPAN></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Tahoma color=black
size=2><SPAN
style="FONT-SIZE: 10pt; COLOR: black; FONT-FAMILY: Tahoma">-----Original
Message-----<BR><B><SPAN style="FONT-WEIGHT: bold">From:</SPAN></B>
oplintech-bounces@oplin.org [mailto:oplintech-bounces@oplin.org]<B><SPAN
style="FONT-WEIGHT: bold">On Behalf Of </SPAN></B>Ron Dalpiaz<BR><B><SPAN
style="FONT-WEIGHT: bold">Sent:</SPAN></B> Tuesday, January 03, 2006 9:59
AM<BR><B><SPAN style="FONT-WEIGHT: bold">To:</SPAN></B>
OPLINTECH@OPLIN.ORG<BR><B><SPAN style="FONT-WEIGHT: bold">Subject:</SPAN></B>
[OPLINTECH] WMF Exploit Hotfix</SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman"
size=3><SPAN
style="FONT-SIZE: 12pt"><![if !supportEmptyParas]><![endif]> <o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><STRONG><B><FONT
face="Times New Roman" color=black size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: black">There's a very effective temporary
hotfix for the WMF Exploit.</SPAN></FONT></B></STRONG><FONT color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman"
color=black size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: black"> </SPAN></FONT><FONT
color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><STRONG><B><FONT
face="Times New Roman" color=black size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: black">It comes from Steve Gibson's site. He is
known as a security guru in the industry.</SPAN></FONT></B></STRONG><FONT
color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman"
color=black size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: black"> </SPAN></FONT><FONT
color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><STRONG><B><FONT
face="Times New Roman" color=black size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: black">You can read about this
at:</SPAN></FONT></B></STRONG><FONT color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman"
color=black size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: black"> </SPAN></FONT><FONT
color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><STRONG><B><FONT
face="Times New Roman" color=black size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: black"><A
href="http://blogs.pcworld.com/tipsandtweaks/archives/001162.html">http://blogs.pcworld.com/tipsandtweaks/archives/001162.html</A></SPAN></FONT></B></STRONG><FONT
color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman"
color=black size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: black"> </SPAN></FONT><FONT
color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><STRONG><B><FONT
face="Times New Roman" color=black size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: black">Gibson's explanation/download page
regarding the fix is at:</SPAN></FONT></B></STRONG><FONT color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman"
color=black size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: black"> </SPAN></FONT><FONT
color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman"
color=black size=3><SPAN style="FONT-SIZE: 12pt; COLOR: black"><A
href="http://www.grc.com/sn/notes-020.htm"><STRONG><B>http://www.grc.com/sn/notes-020.htm</B></STRONG></A></SPAN></FONT><FONT
color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman"
color=black size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: black"> </SPAN></FONT><FONT
color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman"
color=black size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: black"> </SPAN></FONT><FONT
color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><STRONG><B><FONT
face="Times New Roman" color=black size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: black">Ron
Dalpiaz</SPAN></FONT></B></STRONG><FONT color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><STRONG><B><FONT
face="Times New Roman" color=black size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: black">Technology
Coordinator</SPAN></FONT></B></STRONG><FONT color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><STRONG><B><FONT
face="Times New Roman" color=black size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: black">Dover Public
Library</SPAN></FONT></B></STRONG><FONT color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman"
color=black size=3><SPAN
style="FONT-SIZE: 12pt; COLOR: black"> </SPAN></FONT><FONT
color=black><SPAN
style="COLOR: black; mso-color-alt: windowtext"><o:p></o:p></SPAN></FONT></P></DIV></BLOCKQUOTE></FONT></FONT></BODY></HTML>