Legal Notices Danger Warning: This program, PhoneSweep, is designed to test computer system security on telephone networks. It may be used by authorized personnel only, and only when requested by the computer system owners. Any other use may be illegal, or cause injury or financial loss. PhoneSweep may only be used by authorized licensees, who agreed upon installation to all of the terms and conditions of the end user license below: End User License Agreement Sandstorm Enterprises Inc. ("Sandstorm") and/or its suppliers own these programs and their documentation, which are protected under applicable copyright laws. Your right to use the programs and the documentation is limited to the terms and conditions described below. 1. License: YOU MAY: (a) use the enclosed programs on a single computer; (b) physically transfer the programs from one computer to another provided that the programs are used on only one computer at a time, and that you remove any copies of the programs from the computer from which the programs are being transferred; (c) make a copy of the programs solely for purposes of backup. The copyright notice must be reproduced and included on a label on any backup copy. Sandstorm reserves all other rights, including, but not limited to, the following: YOU MAY NOT: (a) distribute copies of these programs or their documentation to others; (b) rent, lease or grant your rights to others; (c) alter the programs or their documentation without the prior written consent of Sandstorm; (d) disassemble or reverse-engineer the programs; or (e) ship or transmit (directly or indirectly) any copies of the programs or its media, or any direct product thereof, to any country or destination prohibited by the United States Government. 2. Term: Your License remains effective until terminated. You may terminate it at any time by destroying the distribution media together with all copies of the programs in any form, and returning the hardware license management device ("dongle") to Sandstorm or destroying it if returning it is not possible. Your License will also automatically terminate without notice if you fail to comply with any term or condition of this Agreement. Upon termination you must destroy all copies of the programs in any form. 3. Limited Warranty, Disclaimer and Limitation of Liability: Sandstorm and Vendor warrant the media on which the Licensed Programs are provided to be free from defects in materials and workmanship for 90 days after delivery. Defective media may be returned for replacement without charge during the 90-day warranty period unless the media has been damaged by accident or misuse. Due to the complex nature of computer software, Sandstorm does not warrant that the Licensed Programs are completely error-free, will operate without interruption, or are compatible with all equipment and software configurations. DO NOT USE THE LICENSED PROGRAMS IN ANY CASE WHERE SIGNIFICANT DAMAGE OR INJURY TO PERSON, PROPERTY OR BUSINESS MAY HAPPEN IF ANY ERROR OCCURS. YOU EXPRESSLY ASSUME ALL RISK FOR SUCH USE, AND FOR ANY VIOLATION OF STATE OR FEDERAL LAW THAT MAY RESULT. Repair, replacement or refund (at the option of Sandstorm) is the exclusive remedy if there is a defect. SANDSTORM MAKES NO WARRANTIES, EXPRESSED OR IMPLIED, WITH RESPECT TO THE LICENSED PROGRAMS, THEIR MERCHANTABILITY, OR THEIR FITNESS FOR ANY PARTICULAR PURPOSE. IN NO EVENT WILL SANDSTORM BE LIABLE FOR INDIRECT OR CONSEQUENTIAL DAMAGES, INCLUDING, WITHOUT LIMITATIONS, LOSS OF INCOME, USE OR INFORMATION, NOR SHALL THE LIABILITY OF SANDSTORM EXCEED THE AMOUNT PAID FOR THE LICENSED PROGRAMS. THE LICENSED PROGRAMS ARE NOT INTENDED FOR PERSONAL, FAMILY OR HOUSEHOLD USE. Any suit or other legal action relating in any way to this Agreement or to the Licensed Programs must be officially filed or officially commenced no later than one (1) year after it accrues. This warranty gives the customer specific legal rights, and you may also have other rights, which vary from state to state. 4. General terms: The License shall not be assigned or transferred without the written consent of Sandstorm. The validity, construction and performance of this Agreement are governed by the laws of the Commonwealth of Massachusetts, without regard to Massachusetts's choice-of-law rules. Suit or arbitration relating to this Agreement may be brought only in Massachusetts. 5. HIGH RISK ACTIVITIES. YOU ACKNOWLEDGE THAT YOU MAY USE THE LICENSED PROGRAMS TO PERFORM INHERENTLY DANGEROUS ACTIONS, WITH A SIGNIFICANT RISK OF: (a) SUBSTANTIAL INJURY OR LOSSES TO YOUR COMPUTER SYSTEMS, BUSINESS OPERATIONS, AND OTHER PROPERTY, OR TO THE INTERESTS, RIGHTS, PROPERTY OR WELL-BEING OF THIRD PARTIES, INCLUDING BUT NOT LIMITED TO YOU OR PEOPLE OR BUSINESSES ASSOCIATED WITH YOU, OR (b) VIOLATING THE LAW (ALL SUCH INJURY, LOSSES AND VIOLATION ARE REFERRED TO AS "TESTING INJURIES"). YOU HEREBY ASSUME ALL RISK OF TESTING INJURIES, WITHOUT REGARD TO WHETHER SANDSTORM KNEW OF OR COULD HAVE PREVENTED SUCH INJURIES. YOU ACKNOWLEDGE THAT YOU HAVE READ THIS AGREEMENT, UNDERSTAND IT AND AGREE TO BE BOUND BY ITS TERMS AND CONDITIONS. YOU FURTHER AGREE THAT IT IS THE COMPLETE AND EXCLUSIVE STATEMENT OF THE AGREEMENT BETWEEN YOU AND SANDSTORM, AND SUPERSEDES ANY EARLIER PROPOSAL OR PRIOR ARRANGEMENT, WHETHER ORAL OR WRITTEN, AND ANY OTHER COMMUNICATIONS BETWEEN YOU AND SANDSTORM RELATING TO THE SUBJECT OF THIS AGREEMENT. This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). Those routines are copyright 1995-1997 Eric Young. The following is included in Mr. Young's copyright notice: Copyright (C) 1995-1997 Eric Young (eay@cryptsoft.com) All rights reserved. This package is an SSL implementation written by Eric Young (eay@cryptsoft.com). The implementation was written so as to conform with Netscape's SSL. This library is free for commercial and non-commercial use as long as the following conditions are adhered to. The following conditions apply to all code found in this distribution, be it the RC4, RSA, lhash, DES, etc., code; not just the SSL code. The SSL documentation included with this distribution is covered by the same copyright terms except that the holder is Tim Hudson (tjh@cryptsoft.com). Copyright remains Eric Young's, and as such any Copyright notices in the code are not to be removed. If this package is used in a product, Eric Young should be given attribution as the author of the parts of the library used. This can be in the form of a textual message at program startup or in documentation (online or textual) provided with the package. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. All advertising materials mentioning features or use of this software must display the following acknowledgement: "This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)" The word 'cryptographic' can be left out if the routines from the library being used are not cryptographic related :-). 4. If you include any Windows specific code (or a derivative thereof) from the apps directory (application code) you must include an acknowledgement: "This product includes software written by Tim Hudson (tjh@cryptsoft.com)." THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. The license and distribution terms for any publicly available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution license [including the GNU Public License.] Our Thanks to Eric Knight who gave us permission to use his publicly available Default System Passwords as part of our suite of bruteforce password source files. The original URL for Eric Knight's password list can be found at: http://www.securityparadigm.com. PhoneSweep End User License Agreement Sandstorm Enterprises 6/6/02 pg 1