CVE-2012-6067
04.12.2012, 23:55
freeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a crafted SFTP session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.Enginsight
| Vendor | Product | Version |
|---|---|---|
| freeftpd | freeftpd | 𝑥 ≤ 1.0.11 |
| freeftpd | freeftpd | 1.0 |
| freeftpd | freeftpd | 1.0.1 |
| freeftpd | freeftpd | 1.0.2 |
| freeftpd | freeftpd | 1.0.3 |
| freeftpd | freeftpd | 1.0.4 |
| freeftpd | freeftpd | 1.0.5 |
| freeftpd | freeftpd | 1.0.6 |
| freeftpd | freeftpd | 1.0.7 |
| freeftpd | freeftpd | 1.0.8 |
| freeftpd | freeftpd | 1.0.10 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration