In addition I thought people might be interested in what Major ISP's are doing to deterr this kinda of attack. Enter md5 authentication. Look it up.. you might be surprised how simple a concept it is.


Best info i found on this vulnerability.


http://www.uniras.gov.uk/vuls/2004/236929/index.htm