This script is Copyright (C) 2000-2011 Tenable Network Security, Inc.
The remote host has an application that is affected by a local
privilege escalation vulnerability.
According to its banner, the remote host appears to be
running OpenSSH version older than 2.1.1. Such versions are
reportedly affected by a local privilege esclation
If the UseLogin option is enabled, then sshd does not switch
to the uid of the user logging in. Instead, sshd relies on
login(1) to do the job. However, if the user specifies a
command for remote execution, login(1) cannot be used and
sshd fails to set the correct user id, so the command is run
with the same privilege as sshd (usually root privileges).
Upgrade to OpenSSH 2.1.1 or make sure that the
option UseLogin is set to no in sshd_config
Risk factor :
High / CVSS Base Score : 7.2
CVSS Temporal Score : 7.2
Nessus Plugin ID: 10439 ()
Bugtraq ID: 1334
CVE ID: CVE-2000-0525
Upgrade to Nessus Professional today!
Start your free Nessus Cloud trial now!
Begin Free Trial
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.