The original challenge allowed any users to have local accounts to access the machine via SSH. This is an important distinction, because if you have local -- or physical -- access to a computer, you have a very distinct leg-up in terms of the ability to escalate your privileges.
Dave Schroeder