VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 8, 2000· Updated Apr 16, 2026

CVE-2000-0525

CVE-2000-0525

Description

OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon.

Affected products

3
  • OpenBSD/OpenSSH3 versions
    cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.