Here's the original report: http://seclists.org/oss-sec/2012/q2/493