A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.