CVE-2000-0525 OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon.
HighCVSS 10.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenBSD openssh | = 1.2 | No fix listed |
| OpenBSD openssh | = 1.2.3 | No fix listed |
| OpenBSD openssh | = 2.1 | No fix listed |
References
- 20000609 OpenSSH's UseLogin option allows remote access with root privilege. mailing-list
- 20000606 The non-default UseLogin feature in /etc/sshd_config is broken and should not be used. vendor-advisory
- 341 vdb-entry
- 1334 vdb-entry
- openssh-uselogin-remote-exec(4646) vdb-entry