please take a look =>
http://www.securityfocus.com/bid/25065/info
http://osvdb.org/show/osvdb/38615
and this is the same vulnerability

atentamente :
Lostmon ( lostmon@gmail.com)