DISA Field Security Operations (FSO) conducted a security evaluation of Open Secure Shell (OpenSSH) version 3.5p1 pre-compiled for Sun Solaris 8. The evaluation process consisted of both lab testing and an Internet search for known vulnerabilities.
http://iase.disa.mil/stigs/whitepaper/openssh-solaris10-1.doc