CVE-2012-6067

freeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a crafted SFTP session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

3.13% chance of exploitation in the next 30 days, 87th percentile

Published

2012-12-04

Updated

2024-09-16

Proof-of-concept exploits (1)

• http://archives.neohapsis.com/archives/fulldisclosure/2012-12/0011.html

References

• CVE Record
• NVD entry

Related

• CVE-2012-6066
• CVE-2012-6081
• CVE-2012-6050
• CVE-2012-6083
• CVE-2012-6048
• CVE-2012-6096