CVE-2000-0143
MediumExploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
The SSH protocol server (sshd) allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
Risk Assessment
The ability for unauthorized users to redirect TCP connections may lead to security breaches and unauthorized access to data.
Recommendation
It is recommended to restrict SSH server access to users with appropriate permissions and consider implementing additional authentication mechanisms.
Other vulnerabilities in sshd
See all- CVE-2000-0992Medium
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.
- CVE-1999-0248High
A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
Original NVD description (English source)
The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.