On Tue, 27 Jan 2009, str0ke wrote: > Already found? > > http://archive.cert.uni-stuttgart.de/bugtraq/2006/05/msg00529.html Agree. Too bad we created CVE-2009-0300 before seeing this :-( (CVE-2006-2636 is correct). - Steve