i've allready posted an advisory about that here:

http://www.securityfocus.com/archive/1/450268



regards laurent gaffié
http://s-a-p.ca/