Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name.
https://exchange.xforce.ibmcloud.com/vulnerabilities/4912
https://euvd.enisa.europa.eu/vulnerability/EUVD-2000-0580
http://www.securityfocus.com/bid/1445
http://shadowpenguin.backsection.net/advisories/advisory038.html