Your comments

+1 as it's a potential exploit - could be used to impersonate a legitimate user/computer.