Fix CVE 2006-4484. Should be backported.