SSH Tectia Server 5.0.0 (A, F, and T), when allowing host-based authentication only, allows users to log in with the wrong credentials.
http://www.vupen.com/english/advisories/2005/2929
http://www.ssh.com/company/newsroom/article/694/
http://www.securityfocus.com/bid/15903