I already publish that vulnerability at bugtraq. See http://www.securityfocus.com/bid/18876 and http://www.securityfocus.com/archive/1/439451. Thx