Milw0rm 4077 seems to have already been discovered by Michael Brooks last January and covered by milw0rm 3083: http://www.milw0rm.com/exploits/4077 http://archives.neohapsis.com/archives/bugtraq/2007-01/0144.html http://www.milw0rm.com/exploits/3083 George -- theall at tenablesecurity.com