Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name.
https://exchange.xforce.ibmcloud.com/vulnerabilities/4912
http://www.securityfocus.com/bid/1445
http://shadowpenguin.backsection.net/advisories/advisory038.html