mielu.ro - blog

din metallica si megadeth

au un sunet crud (as in not tempted with) si cel mai mult imi plac:

Megadeth - 502 Lyrics


Pull over, shithead, this is the cops
Full tank, pockets lined with cash
Full throttle, gonna rip some ass.
Drive all day, and through the night,
Romance the road, winding left and right.
The stars above guide me, the moonlight is free.
A feeling inside me, and the whole world to see.

Driving fast makes me feel good,
The speed of light trapped under my hood.
Breaking laws, 'cause there's nothing to do.
Driving the interstate, stopped for a 502

Hundreds of miles rolled off today.
Signs lose their meaning, minutes tick away.
Dirt roads to interstates, I must have drove them all.
Cigarettes and burgers, caffeine and alcohol.

Drive until daybreak, always on the go.
Life on the freeway, night shift till dawn patrol.

Driving fast makes me feel good,
The speed of light trapped under my hood
Breaking laws 'cause there's nothing to do.
Driving the interstate, stopped for a 502.
Stopped for a 502, next time it's gonna be you.

Stars above guide me
This feeling inside me.
I drive until daybreak.
Life on the freeway is Hell.
I'm coming through.


Metallica - The Wait Lyrics

[One, two, three, four]

Motives changing, day to day
The fire increases, masks decay
I look at the river, white foam floats down
The body's poisoned, gotta sit tight

The wait
The wait
The wait
The wait

After wakening, silence grows
The screams subside, distortion shows
Mutant thoughts, of bad mouthed news
It's just another birth, of distorted views

The wait
The wait
The wait
The wait

The wait
The wait
The wait
The wait

Citrix Program Neighborhood Name Heap Corruption Vulnerability

iDefense Security Advisory 12.16.05
www.idefense.com/application/poi/display?id=357&type=vulnerabilities
December 16, 2005

I. BACKGROUND

Citrix Program Neighborhood is the client used to connect to
applications published on Citrix Metaframe servers.

More information is available from the vendor website:

http://www.citrix.com

II. DESCRIPTION

Remote exploitation of a heap overflow vulnerability in Citrix, Inc.'s
Program Neighborhood allows attackers to execute arbitrary code.

The vulnerability specifically exists due to insufficient handling of
corrupt Application Set responses. A heap-based buffer overflow will
occur when the Citrix Program Neighborhood client receives an
Application Set response containing a name value over 286 bytes. The
overflow will trigger an access violation in RtlFreeHeap() with
register control sufficient to write 4 bytes to an arbitrary location
as shown below:

77F52A7B 8B4E 0C MOV ECX,DWORD PTR DS:[ESI+C]
77F52A7E 898D 60FFFFFF MOV DWORD PTR SS:[EBP-A0],ECX
77F52A84 8901 MOV DWORD PTR DS:[ECX],EAX

Registers:
EAX 41414141
ECX 00004141
ESI 008D5E30 ASCII "AAAAAAAAAAAAAA"
EIP 77F52A84 ntdll.77F52A84

Crash:
77F52A84 8901 MOV DWORD PTR DS:[ECX],EAX

Remote attackers can send an specially crafted name value to overflow
the buffer and execute arbitrary code.

III. ANALYSIS

Successful exploitation of the vulnerability allows remote attackers to
execute arbitrary code with user privileges. The overflow is a
trivial heap-based buffer overflow due to insufficient bounds checking
on the 'name' value in Application Set responses. A typical
exploitation scenario would require an attacker to setup a fake Citrix
Server and wait for a Citrix Program Neighborhood client to connect.
Upon receiving the first connecting packets from the client, the server
would send a corrupt UDP packet to the client.

IV. DETECTION

iDefense has confirmed the existence of this vulnerability in Citrix
Presentation Server Client 9.0. All prior versions are suspected
vulnerable.

V. WORKAROUND

iDefense is unaware of any effective workarounds at this time.

VI. VENDOR RESPONSE

The vendor has released the following advisory to address this issue:

http://support.citrix.com/kb/entry.jspa?externalID=CTX108354

VII. CVE INFORMATION

The Common Vulnerabilities and Exposures (CVE) project has assigned the
name CVE-2005-3652 to this issue. This is a candidate for inclusion in
the CVE list (http://cve.mitre.org), which standardizes names for
security problems.

VIII. DISCLOSURE TIMELINE

11/15/2005 Initial vendor notification
11/15/2005 Initial vendor response
12/16/2005 Coordinated public disclosure

IX. CREDIT

iDefense credits Patrik Karlsson (patrik@cqure.net) with the discovery
of this vulnerability.

Get paid for vulnerability research
http://www.iDefense.com/poi/teams/vcp.jsp

Free tools, research and upcoming events
http://labs.iDefense.com

X. LEGAL NOTICES

Copyright © 2005 iDefense, Inc.

Permission is granted for the redistribution of this alert
electronically. It may not be edited in any way without the express
written consent of iDefense. If you wish to reprint the whole or any
part of this alert in any other medium other than electronically, please
email customerservice@iDefense.com for permission.

Disclaimer: The information in the advisory is believed to be accurate
at the time of publishing based on currently available information. Use
of the information constitutes acceptance for use in an AS IS condition.
There are no warranties with regard to this information. Neither the
author nor the publisher accepts any liability for any direct, indirect,
or consequential loss or damage arising from use of, or reliance on,
this information.

??.05.02

Depersonalizare. Observarea propriului comportament, propriilor ganduri, trairi, sentimente, cu o detasare undeva intre indiferenta si afectiune. Asa cum ma uit acum in urma cu drag la “eu”-rile care au fost pana acum, la fel ma uit acum la mine, de parca ochiul care vede si mintea care nu judeca au trecut deja de etapa asta din timp si spatiu.
Partea buna este linistea si calmul interior (indiferenta?) care persista peste zbuciumurile si dezordinea exterioara.
Partea rea este ceea ce-mi pare a fi o disparitie a senzatiei / starii de responsabilitate. Imi asum , cu ochiul care vede, actiunile si spusele, insa cea care le face parca nu e responsabila… Oare am fost vreodata?

25.06.02

Din confuzie, haos, tristete cosmica, cadere, delasare, depersonalizare… incepe sa iasa ceva la suprafata… ceva nou care parca sprijina, sustine vechiul schilodit… ceva nou puternic, mai nepasator, mai invatat, care nu mai e dispus sa se lase calcat in picioare, si mai ales nu mai e dispus sa se calce singur in picioare…
“Lasa-ma acum, am ales ce-am ales, chiar daca gresesc e o parte din mine”
Vreau sa pot striga, sa ma pot certa, sa ripostez, sa raspund, sa explodez, sa ma arunc in gol si in loc de atrocea cadere sa zbor, cu o viteza incredibila.
Din depersonalizare incep sa devin Eu, un alt Eu, un nou Eu, mai aproape de Eul ideal… Lasand la o parte abureala psihologica chiar incep sa ma plac mai mult… de fapt incep sa ma apreciez, sa ma ascult, sa ma inteleg, sa ma ajut, sa ma sustin, sa ma respect si s-ar putea sa ajung chiar sa ma admir.
Dupa o seara foarte ciudata – o revelatie de cacat si o combinare seaca – parca renasc, parca ma trezesc dintr-un somn care deja se prelungise prea mult… nu mai lenevesc in pat… ma ridic si…

11.07.02

Inca ani si ani de zile pentru ce??? Pana unde?
Aceeasi singuratate, doar alte fete… cate o speranta, cate o traire si in rest doar rutina ca sa nu doara, ca sa nu mor inghitita de golul asta pe care nu pare sa-l poata umple nimic… Ti se pare… apuci sa rasufli o data si incepi sa zambesti si se goleste de mii de ori mai repede decat s-a umplut si prin asta golul devine de fiecare data mai mare si mai greu de umplut… pana cand? Am obosit!!! Singura persoana pentru care contez in adevaratul sens nu ma lasa sa mor, sa ma odihnesc!!! Si totul devine strain, oamenii ma sperie, ar putea sa ma rupa atat de usor, ma sperie si ca nu-si dau seama de asta… imi vomit dezgustul pe prostia lor.
INCA O ZI??? CUM??? CU CE??? La “cu cine” renunt… nu e nimeni… doar umbre de “cineva” care se schimba si dispar cat ai clipi…
Cum inca o zi cand eu incerc sa ma las rupta in seara asta dar nu ma rup pana la capat… doar cat sa agonizez… cat sa schiopat si sa ma impiedic pana incepe o noua zi in care iar mor in normal…

12.07.02

Adun bucatile si le lipesc… scutur sarea cu un zambet chinuit… imi pun inima intr-o cutie si sper s-o pot tine acolo pana doare mai putin… Sper sa gasesti cheia, sa imprastii bucatile si sa le adunam impreuna fara lacrimi… doar cu zambete plutitoare…