Buffer overflow in oversized rexec -l switch in combination with -n, rwrite, kermit.
vulners.com/securityvulns/securityvulns:doc:4470
vulners.com/securityvulns/securityvulns:doc:4478
vulners.com/securityvulns/securityvulns:doc:4479