Hmmph. If people running 2.1x all this time had such a vulnerability, HOW MANY OTHER packages now have similar holes in them? Ignoring the fact that so many directories and files are blatantly mode 666 or 777. I've been waiting for a hole like this to pop up in the Gnu stuff for quite a while, for instance; they are really lax with their distribution trees. _H*