Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing enabled, allows remote and local authenticated users to gain privileges.
http://archives.neohapsis.com/archives/bugtraq/2002-04/0298.html
http://archives.neohapsis.com/archives/bugtraq/2002-04/0394.html
http://marc.info/?l=bugtraq&m=102167972421837&w=2