CVEvulnerability

CVE-2000-0525

10.0 HIGH Published 2000-06-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2000-06-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon.

Affected configurations

• openbsd openssh 1.2 • openbsd openssh 1.2.3 • openbsd openssh 2.1

References