This script is Copyright (C) 2000-2011 Tenable Network Security, Inc.
The remote host has an application that is affected by a local
privilege escalation vulnerability.
According to its banner, the remote host appears to be
running OpenSSH version older than 2.1.1. Such versions are
reportedly affected by a local privilege esclation
If the UseLogin option is enabled, then sshd does not switch
to the uid of the user logging in. Instead, sshd relies on
login(1) to do the job. However, if the user specifies a
command for remote execution, login(1) cannot be used and
sshd fails to set the correct user id, so the command is run
with the same privilege as sshd (usually root privileges).
Upgrade to OpenSSH 2.1.1 or make sure that the
option UseLogin is set to no in sshd_config
Risk factor :
High / CVSS Base Score : 7.2
CVSS Temporal Score : 7.2