Waiting...

Update: Vendor asked more time to investigate the vulnerability...

I am in contact with a Vendor to whom I sent a vulnerability report, but I'm not sure whether or not they're kidding me, so, if no answer, Mon 21 Jun 2010 you will find on this blog a detailed report of the vulnerability.

Be safe