This issue was given the name CVE-2010-3312 quite a while ago. See https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-3312 for more info. -- Vincent Danen / Red Hat Security Response Team