Since this is a drive buffalo, I might try ettercap ssh downgrade attack:

http://openmaniak.com/ettercap_filter.php
ttp://sites.google.com/site/clickdeathsquad/Home/cds-ssh-mitmdowngrade

Not sure how a man in the middle attack will work, since I don't know the password to begin with...

Or Hydra:

Hydra Instructions:

http://www.youtube.com/watch?v=7CP-JB4QARo

Hydra is promising. I tried it with the common passwords list from openwall. No luck. Do you have any better password lists?

Thanks,

Mark