OpenSSH's UseLogin option allows remote access with root privilege.

[Markus Friedl]

> Is OpenBSD with "UseLogin yes" vulnerable or not (even though it's not
> default)?

all systems running OpenSSH with UseLogin=yes are vulnerable.

however, it was not possible for me to make this

	$ ssh openbsdhost id

work on OpenBSD+OpenSSH+UseLogin.