Description (CNA)
OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4646
- http://www.openbsd.org/errata.html#uselogin
- http://www.osvdb.org/341
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0065.html
- http://www.securityfocus.com/bid/1334
ADP enrichment
No English description supplied.