The issues covered by Milw0rm 3743 / Bugtraq 23502 are a subset of those posted back in 2002 by avart at gmx.de; eg, http://archives.neohapsis.com/archives/bugtraq/2002-07/0471.html and covered by CVE-2002-1412 / Bugtraq 5375. Or am I missing something? George -- theall at tenablesecurity.com