The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0143