Hey, there’s a buffer overflow in versions off sshd compiled with RSAREF2 support. This problem sounds worse than it is, because support for RSAREF2 is not included in sshd by default. RSAREF2 is generally used by people who want to use RSA encryption without giving money to RSA. (The Tao of Windows Buffer Overflow contains an explanation of what buffer overflows are and how to exploit them, if you don’t know already.)