CVE-2000-0143 - Vulnerability Details - OpenCVE

The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Openbsd	Openssh
Ssh	Ssh

Configuration 1 [-]

OR	cpe:2.3:a:openbsd:openssh::::::::
	cpe:2.3:a:openbsd:openssh:1.2:::::::*
	cpe:2.3:a:ssh:ssh:1.2.0:::::::*
	cpe:2.3:a:ssh:ssh:1.2.1:::::::*
	cpe:2.3:a:ssh:ssh:1.2.2:::::::*
	cpe:2.3:a:ssh:ssh:1.2.3:::::::*
	cpe:2.3:a:ssh:ssh:1.2.4:::::::*
	cpe:2.3:a:ssh:ssh:1.2.5:::::::*
	cpe:2.3:a:ssh:ssh:1.2.6:::::::*
	cpe:2.3:a:ssh:ssh:1.2.7:::::::*
	cpe:2.3:a:ssh:ssh:1.2.8:::::::*
	cpe:2.3:a:ssh:ssh:1.2.9:::::::*
	cpe:2.3:a:ssh:ssh:1.2.10:::::::*
	cpe:2.3:a:ssh:ssh:1.2.11:::::::*
	cpe:2.3:a:ssh:ssh:1.2.12:::::::*
	cpe:2.3:a:ssh:ssh:1.2.13:::::::*
	cpe:2.3:a:ssh:ssh:1.2.14:::::::*
	cpe:2.3:a:ssh:ssh:1.2.15:::::::*
	cpe:2.3:a:ssh:ssh:1.2.16:::::::*
	cpe:2.3:a:ssh:ssh:1.2.17:::::::*
	cpe:2.3:a:ssh:ssh:1.2.18:::::::*
	cpe:2.3:a:ssh:ssh:1.2.19:::::::*
	cpe:2.3:a:ssh:ssh:1.2.20:::::::*
	cpe:2.3:a:ssh:ssh:1.2.21:::::::*
	cpe:2.3:a:ssh:ssh:1.2.22:::::::*
	cpe:2.3:a:ssh:ssh:1.2.23:::::::*
	cpe:2.3:a:ssh:ssh:1.2.24:::::::*
	cpe:2.3:a:ssh:ssh:1.2.25:::::::*
	cpe:2.3:a:ssh:ssh:1.2.26:::::::*
	cpe:2.3:a:ssh:ssh:1.2.27:::::::*

No data.

References

Link	Providers
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0143

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2000-02-16T05:00:00

Updated: 2024-08-08T05:05:54.070Z

Reserved: 2000-02-16T00:00:00

Link: CVE-2000-0143

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2000-02-11T05:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2000-0143

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2000-02-11T00:00:00", "descriptions": [{"lang": "en", "value": "The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-08-17T08:22:53", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0143"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2000-0143", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0143", "refsource": "MISC", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0143"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T05:05:54.070Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0143"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2000-0143", "datePublished": "2000-02-16T05:00:00", "dateReserved": "2000-02-16T00:00:00", "dateUpdated": "2024-08-08T05:05:54.070Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*", "matchCriteriaId": "D4EFC03C-F5A7-4B74-B664-5828763B3E8E", "versionEndIncluding": "1.2.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*", "matchCriteriaId": "316C8534-9CE3-456C-A04E-5D2B789FBE31", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "1E9C3330-E163-4699-B7F6-2D9B089E8A6D", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "F62C0C54-6BC0-4A8B-8006-F1EEEFAC3699", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "011ECCA8-63DD-4FB0-A2F4-B4BAF344242E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "86A52DB0-B17A-437C-8E3A-0F824B9F88AD", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "8EDDCCD5-76B1-4981-BA9D-0C4702DD3FBA", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "6A9E54C6-7003-46B0-85B3-0C2E7E611D38", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "082C8ECC-CDAF-440B-90D0-A1FE028B03F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "7D0AAA72-CAA5-4985-ADD9-1790CE3C66D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.8:*:*:*:*:*:*:*", "matchCriteriaId": "C0C2A220-D8AB-4FAD-8048-F2C1764F965F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.9:*:*:*:*:*:*:*", "matchCriteriaId": "5010A78A-394E-4196-90CB-5D371C3BD1EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.10:*:*:*:*:*:*:*", "matchCriteriaId": "E5F6F181-41B1-47D1-A216-194DC4C762EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.11:*:*:*:*:*:*:*", "matchCriteriaId": "D6EEBDAB-AA0D-407B-B8EE-6C33B0423AF9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.12:*:*:*:*:*:*:*", "matchCriteriaId": "45446BD9-3B03-43B6-B686-F6EACFABD699", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.13:*:*:*:*:*:*:*", "matchCriteriaId": "FCE6F492-8E28-4FA1-9BF1-96BAF5D68545", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.14:*:*:*:*:*:*:*", "matchCriteriaId": "41BF66ED-CB08-440E-AC05-A31371B7A380", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.15:*:*:*:*:*:*:*", "matchCriteriaId": "E0EE3216-D8FF-43F0-9329-6676E2CEC250", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.16:*:*:*:*:*:*:*", "matchCriteriaId": "9310E12D-1136-4AD6-9678-8ADCD9EE58C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.17:*:*:*:*:*:*:*", "matchCriteriaId": "BBEDF399-58DE-491A-8B51-87E0392FF9C9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.18:*:*:*:*:*:*:*", "matchCriteriaId": "CBDF2DE8-8559-4BED-80AE-E1420BBF4043", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.19:*:*:*:*:*:*:*", "matchCriteriaId": "23EB8421-76BF-47D1-B294-68412D5E4572", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.20:*:*:*:*:*:*:*", "matchCriteriaId": "D9560989-5342-4C6B-974F-7D90C467BA39", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.21:*:*:*:*:*:*:*", "matchCriteriaId": "971835AF-E908-4C74-9DE0-167349138DEC", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.22:*:*:*:*:*:*:*", "matchCriteriaId": "2E0D49C5-54B4-4437-A2D3-3EBFA1D9A3CF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.23:*:*:*:*:*:*:*", "matchCriteriaId": "926B57D7-009C-4317-ACFB-98551FADC5B2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:*", "matchCriteriaId": "B0EDBA45-FDEE-4D4B-A6FF-7E953B523DAE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*", "matchCriteriaId": "7AF5BDEF-E86B-4F4D-AF6D-B27044A96B1E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:*", "matchCriteriaId": "7D0FF07F-E13B-425F-9892-C50B326B2944", "vulnerable": true}, {"criteria": "cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*", "matchCriteriaId": "338EDA76-05D6-48C0-952E-6244A5F206F3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP."}], "id": "CVE-2000-0143", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2000-02-11T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0143"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0143"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}