Trivial authentication bypass in libssh leaves servers wide open
From the reading, the "hack" is pretty embarrassing.  The server->client message that announces you're authenticated is instead sent client->server and the server just sets its mode to that.  Abracadabra, you're logged in!