critical9.3Public exploit code
CVE-2012-6066
freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modifi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- freeSSHd 1.2.6 - Authentication Bypass (Metasploit)2013-01-15 · remote · windows · Verified
- freeSSHd 2.1.3 - Remote Authentication Bypass2012-12-02 · remote · windows · Verified
- freeFTPd 1.2.6 - Remote Authentication Bypass2012-12-02 · remote · windows · Verified
Impact
freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freesshd | Freesshd | through 1.2.6 Versions 1.2.1, 1.2.2 |