Shayan Sadigh discovered a vulnerability in OpenSSH: If PAM support is
enabled and the sshd PAM configuration is configured to read userspecified
environment variables and the UseLogin
option is enabled, a
local user may escalate her privileges to root.