Re: Upcoming OpenSSH vulnerability

[Rémi Guyomarch <rguyom@pobox.com>]

On Mon, Jun 24, 2002 at 03:00:10PM -0600, Theo de Raadt wrote:
> There is an upcoming OpenSSH vulnerability that we're working on with
> ISS.  Details will be published early next week.
> 
> However, I can say that when OpenSSH's sshd(8) is running with priv
> seperation, the bug cannot be exploited.

Does it means that this bug can be exploited when sshd is running with
"PermitRootLogin yes" ?

-- 
Rémi