CVE-2000-0525

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Jun 8, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-05265.0mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-052710.0userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-05285.0Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames fo CVE-2000-05295.0Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request.CVE-2000-05307.2The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files.CVE-2000-05312.1Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.CVE-2000-05327.5A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote attackers to access CVE-2000-05337.2Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files.CVE-2000-05344.6The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows local users to execute c CVE-2000-05355.0OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent o CVE-2000-05367.5xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a rever CVE-2000-05377.2BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG e