Lucene search

K
nvd[email protected]NVD:CVE-2012-6066
HistoryDec 04, 2012 - 11:55 p.m.

CVE-2012-6066

2012-12-0423:55:01
CWE-287
web.nvd.nist.gov
1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.249 Low

EPSS

Percentile

96.7%

freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.

Affected configurations

NVD
Node
freesshdfreesshdRange1.2.6
OR
freesshdfreesshdMatch1.2.1
OR
freesshdfreesshdMatch1.2.2

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.249 Low

EPSS

Percentile

96.7%