CVE-2008-0852: Undefined Security Weakness

freeSSHd 1.2 and earlier allows remote attackers to cause a denial of service crash via a SSH2MSGNEWKEYS packet to TCP port 22, which triggers a NULL pointer dereference...