CVE-2000-0525

Description

OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/4646

http://www.securityfocus.com/bid/1334

http://www.osvdb.org/341

http://www.openbsd.org/errata.html#uselogin

http://archives.neohapsis.com/archives/bugtraq/2000-06/0065.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3