OMG - unsanitized shell command. Thanks to Niels Teusink. (CVE-2009-1579)