Two rootkit / backdoor patches to ssh-1.2.27. The first diff turns ssh into a major backdoor. it will report itself as nscd in the process list, have ALL logging disabled, run on a different port, ignore all settings in the config file and allow a “magic word” login to all accounts, including root. The other patch simply adds a magic password to sshd, for use in patching an existing sshd.
You can download it from the following link: https://packetstormsecurity.com/files/download/11540/falcon-ssh-diffs.tar.gz
Source: https://packetstormsecurity.com/files/11540/falcon-ssh-diffs.tar.gz.html