sshd vulnerabilities

Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.

The SSH protocol server (sshd) allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.

A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.