Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string.Referenceshttp://www.securityfocus.com/bid/1256http://marc.info/?l=bugtraq&m=95928319715983&w=2http://www.pdgsoft.com/Security/security2.htmlhttp://marc.info/?l=ntbugtraq&m=95928667119963&w=2