Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent
attackers to execute arbitrary code via a long first argument to the
msql_connect function.

kees

jdstrand	needs malicious script to be effective
kees	mSQL connector is not built in Debian/Ubuntu