A live-config update has been released for Debian 6.0 LTS

Package : live-config
Version : 2.0.15-1.1+deb6u1
Debian Bug : 741678

A vulnerability against Debian Live, the live systems project, was reported. The
default, the live images include a SSH server allowing for log in with default
user and password. This fix set PasswordAuthentication in /etc/ssh/sshd_config
as "no".