CVE-2000-0525: Critical severity OpenBSD OpenSSH vulnerability
Published Jun 8, 2000
·Updated
OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon.
Affected Software
3 affected components
OpenBSD OpenSSH=1.2.3
OpenBSD OpenSSH=2.1
OpenBSD OpenSSH=1.2
Event History
Jun 8, 2000
CVE Published
04:00 AM
Oct 13, 2000
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0525?
The severity of CVE-2000-0525 is considered high due to its potential for local users to execute arbitrary commands.
2
How do I fix CVE-2000-0525?
To fix CVE-2000-0525, disable the UseLogin option in the OpenSSH configuration file.
3
Which versions of OpenSSH are affected by CVE-2000-0525?
CVE-2000-0525 affects OpenSSH versions 1.2, 1.2.3, and 2.1.
4
What are the potential impacts of CVE-2000-0525?
The potential impacts of CVE-2000-0525 include unauthorized command execution by local users.
5
Is CVE-2000-0525 relevant for my system?
CVE-2000-0525 is relevant for systems running vulnerable versions of OpenSSH that have the UseLogin option enabled.