The Online Registration Facility of Algorithmic Research PrivateWire VPN Software does not do proper bounds checking handling normal GET requests. Sending an overly long page or script name, it causes a buffer overflow and an attacker can control the EIP to run arbitrary code on the victims machine.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/47787/ERNW-01-2006.txt
Source: https://packetstormsecurity.com/files/47787/ERNW-01-2006.txt.html