The following reply was made to PR pkg/33230; it has been noted by GNATS.

From: Tonnerre LOMBARD <tonnerre@thebsh.sygroup.ch>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: pkg/33230
Date: Mon, 10 Apr 2006 14:20:37 +0200

 I forgot that actually you need a %00 in front of the parameter, of course,
 plus it needs to be passed through html_entity_decode, but anyway, since the
 bug itself is already in the pkg-vulnerabilities database, I think the field
 is f00.