2.3.1

DATE	CVE	VULNERABILITY TITLE	RISK
2006-09-27	CVE-2006-5051	Double Free vulnerability in multiple products Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free. network high complexity openbsd debian apple CWE-415	8.1
2002-03-15	CVE-2002-0083	Off-by-one Error vulnerability in multiple products Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges. network low complexity conectiva immunix openpkg mandrakesoft openbsd trustix suse redhat engardelinux CWE-193 critical	9.8