Dear Nekral, I have not yet written an exploit/PoC/demo, but think it should be rather easy to do. Looking at the recent DSA-1500 also, I ask you to change the severity of this bug to "critical - root security hole", and of course to fix things quickly. (I would change the severity myself, but I think as a result of bug #299007 am not allowed.)
Thanks, Paul Paul Szabo [EMAIL PROTECTED] http://www.maths.usyd.edu.au/u/psz/ School of Mathematics and Statistics University of Sydney Australia -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]