It's possible to insert command and intercept data from ssh session.
vulners.com/securityvulns/securityvulns:doc:1769
vulners.com/securityvulns/securityvulns:doc:3150