Unscored CVE-2012-6067 EUVD-2012-5941GHSA-w4wv-m3jp-8pc7

freeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a crafted SFTP session, as demonstrated by an …

Published Dec 4, 2012 · Updated Sep 16, 2024 · Assigned by mitre

Description

freeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a crafted SFTP session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.

References

20121201 FreeFTPD Remote Authentication Bypass Zeroday Exploit (Stuxnet technique) mailing-list