see http://online.securityfocus.com/archive/1/285492/2002-07-29/2002-08-04/0