This is a multi-part message in MIME format.
--------------030503040003060900050909
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: 7bit

Please find attached a detailed advisory of the vulnerability.

Alternatively, the advisory can also be found at:
http://www.trapkit.de/advisories/TKADV2010-001.txt 

--------------030503040003060900050909
Content-Type: text/plain;
 name="TKADV2010-001.txt"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
 filename="TKADV2010-001.txt"
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--------------030503040003060900050909--