In message <200102081817.UAA09903@netbsd.hut.fi>, you write: 

-> Module Name:	basesrc
-> Committed By:	itojun
-> Date:		Thu Feb  8 18:17:24 UTC 2001
-> 
-> Modified Files:
-> 	basesrc/crypto/dist/ssh: auth2.c
-> 
-> Log Message:
-> authentication mistake in SSHv2 + pubkey, from markus.
-> REBUILD AND RESTART SSHD NOW.
-> (vulnerability window for netbsd-current - < 48hours)

Can you give us more info on this, esp. which versions are affected?
Is the sshd in 1.5 affected, for example?

Thanks!
--rafal

----
Rafal Boni                                                  rafal@mediaone.net