Yes, it's commonly quoted as: "Wait for us, we're the leader!"
"Basically if you pass a "-fusername" as an argument to the -l option you get full access to the OS as the user specified. In my example I do it as bin but it worked for regular users, just not for root. This combined with a reliable local privilege escalation exploit would be devastating. Expect mass scanning and possibly the widespread exploitation of this vulnerability.
Heuristics are bug ridden by definition. If they didn't have bugs, then they'd be algorithms.