http://lists.netsys.com/pipermail/full-disclosure/2004-April/020458.html
The full original paper is at
http://www.osvdb.org/4030
---Mike