FreeBSD Security Advisory FreeBSD-SA-02:31 - OpenSSH included with FreeBSD-CURRENT between 2002-03-18 and 2002-06-25 has a remote root vulnerability because ChallengeResponseAuthentication is turned on by default.
95c8eacb9873f2fd53d933945c9f51ac0fb845249ac900809ad7f1f99002a160