Ehmmm sorry for the double post, the problem is still the same which is already known from one year or two as stated in the following advisory of Mehdi Oudad and Kevin Fernandez of zone-h.fr:
http://www.zone-h.fr/fr/advisories/read/id=1548/ http://seclists.org/fulldisclosure/2006/Dec/0254.html --- Luigi Auriemma http://aluigi.org
