A buddy of mine got nailed recently using Lenny's Exim. I guess this has been known for a week or so but this was the first I'd heard of it. Some details are here: http://www.kb.cert.org/vuls/id/682457 and here: http://www.debian.org/security/2010/dsa-2131 Patch 'em if you got 'em. -t