CVE-2012-6066 freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.
HighCVSS 9.3
EPSS 39.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freesshd | <= 1.2.6 | No fix listed |
| freesshd | = 1.2.1 | No fix listed |
| freesshd | = 1.2.2 | No fix listed |