To further help the discussion, this was post on bugtraq.

http://seclists.org/lists/bugtraq/2004/Oct/0151.html

http://seclists.org/lists/bugtraq/2005/Mar/0103.html