CVEvulnerability

CVE-2012-6067

10.0 HIGH Published 2012-12-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-12-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287

Description

freeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a crafted SFTP session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.

Affected configurations

• freeftpd freeftpd (<= 1.0.11) • freeftpd freeftpd 1.0 • freeftpd freeftpd 1.0.1 • freeftpd freeftpd 1.0.2 • freeftpd freeftpd 1.0.3 • freeftpd freeftpd 1.0.4 • freeftpd freeftpd 1.0.5 • freeftpd freeftpd 1.0.6 • freeftpd freeftpd 1.0.7 • freeftpd freeftpd 1.0.8 • freeftpd freeftpd 1.0.10

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References