there are about a dozen ISP's extensively using ascend's which have this hole.
our original RFP to them dealt with this issue
but they did not execute
they keep trying to fix this, but so far no go
we have tried to keep this quiet so that
microsoft/uunet/psinet/etc.....
don't get extensively hacked
we have had two occurences of this so far in one year that I know of though
there are probably more
marty