Description
OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon.
References
- openssh-uselogin-remote-exec(4646) vdb-entry
- 20000606 The non-default UseLogin feature in /etc/sshd_config is broken and should not be used. vendor-advisory
- 341 vdb-entry
- 20000609 OpenSSH's UseLogin option allows remote access with root privilege. mailing-list
- 1334 vdb-entry