CVE-2000-0143 Security feature bypass in n/a
Local users without shell access can bypass restrictions to redirect TCP connections through SSH to other services.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2000-0143?
CVE-2000-0143 is a medium-severity vulnerability in OpenSSH, published on 16 Feb 2000. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
Which versions are affected by CVE-2000-0143?
It affects 2 products.
Products include OpenSSH, Ssh Ssh.
How do I fix CVE-2000-0143?
No fix has been published for CVE-2000-0143 yet. Limit exposure of the affected software until one is available.
Is CVE-2000-0143 being exploited?
There is no known exploitation of CVE-2000-0143 in the wild and no public exploit code.
Other vulnerabilities in OpenSSH
Sources
Also known as GHSA-mcq5-ghfg-w6qg.