eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions
*** This bug has been marked as a duplicate of bug 710308 ***