Lucene search
HistoryDec 04, 2012 - 11:55 p.m.
CVE-2012-6067
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.2%
freeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a crafted SFTP session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.
Affected configurations
Node
freeftpdfreeftpdRange≤1.0.11
ORfreeftpdfreeftpdMatch1.0
ORfreeftpdfreeftpdMatch1.0.1
ORfreeftpdfreeftpdMatch1.0.2
ORfreeftpdfreeftpdMatch1.0.3
ORfreeftpdfreeftpdMatch1.0.4
ORfreeftpdfreeftpdMatch1.0.5
ORfreeftpdfreeftpdMatch1.0.6
ORfreeftpdfreeftpdMatch1.0.7
ORfreeftpdfreeftpdMatch1.0.8
ORfreeftpdfreeftpdMatch1.0.10
Related
prion
prion
Authentication flaw
2012-12-04 23:55:00
cve
cve
CVE-2012-6067
2022-10-03 16:15:28
cvelist
cvelist
CVE-2012-6067
2022-10-03 16:15:28
nessus
nessus
freeFTPd / freeSSHd SFTP Authentication Bypass
2012-12-11 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.2%
Related for NVD:CVE-2012-6067