Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent
attackers to execute arbitrary code via a long first argument to the
msql_connect function.

 jdstrand> needs malicious script to be effective
 kees> mSQL connector is not built in Debian/Ubuntu

kees