CVE-2000-0525: OpenBSD OpenSSH

High severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days.

OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon.

Affected products

• OpenBSD OpenSSH: version 1.2 only; version 1.2.3 only; version 2.1 only

Published 2000-06-08. Last modified 2026-06-16.