critical10.0
CVE-2012-6067
freeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a crafted SFTP session, as demonstrated by an OpenSSH client with …
Impact
freeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a crafted SFTP session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freeftpd | Freeftpd | through 1.0.11 Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4 |