&gt; The argument to the strcmp call is <i>&lt;&lt;&lt; %s(un=&#x27;%s&#x27;) = %u</i>, which is the backdoor password, and was presumably chosen so that it would be mistaken for one of the many other debug format strings in the code.<p>That&#x27;s very clever from the attackers point of view, extra kudos to hdmoore for finding it!