Flaw bug created to hold information about an old flaw we knew something about. For more details see the MITRE CVE description.
A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.
This flaw is fixed in Red Hat Enterprise Linux 2.1 via the errata RHSA-2003:280.
This flaw is fixed in Red Hat Enterprise Linux 3 as a backported patch. The source RPM contains the patch openssh-3.6.1p2-owl-realloc.diff which resolved this flaw before Red Hat Enterprise Linux 3 GA.
This flaw does not affect any subsequent versions of Red Hat Enterprise Linux.