CVE Catalog

CVE-2000-0143

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.35%

27th percentile - higher than 27% of all known CVEs

Summary

The SSH protocol server (sshd) allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.

Risk Assessment

The ability for unauthorized users to redirect TCP connections may lead to security breaches and unauthorized access to data.

Recommendation

It is recommended to restrict SSH server access to users with appropriate permissions and consider implementing additional authentication mechanisms.

Original NVD description (English source)

The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS