 The OpenBSD website features a prominent reference to the security record of the default installation . Until June 2002 , the wording read " Five years without a remote hole in the default install ! " An OpenSSH bug was then discovered that made it possible for a remote attacker to gain root privileges in OpenBSD and in any of the other systems running OpenSSH at the time . It was quickly fixed , as is normal with known security holes . The slogan was changed to " One remote hole in the default install , in nearly 6 years ! " In 2007 , a network @-@ related remote vulnerability was found , which was also quickly fixed . The quote was subsequently altered to " Only two remote holes in the default install , in a heck of a long time ! " As of July 2016 , the wording remains . 
