I guess Joyent already knows about this problem. I will just open a ticket for it here. Interesting links: http://www.openwall.com/lists/oss-security/2014/09/08/4