in june 2002, mark dowd of internet security systems disclosed a bug in the openssh code implementing challenge-response authentication. this vulnerability in the openbsd default installation allowed an attacker remote access to the root account, which was extremely serious not only to openbsd, but also to the large number of other operating systems that were using openssh by that time. this problem necessitated the adjustment of the slogan on the openbsd website to: