CVE-2012-6066

high · 9.3

freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.

9.3

CVSS

39.5%

EPSS (exploit prob.)

99th

EPSS percentile

2012-12-04

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-287

Affected products

Vendor	Product	Affected versions
freesshd	freesshd	<= 1.2.6
freesshd	freesshd	1.2.1
freesshd	freesshd	1.2.2

Check a specific version with /api/v1/cve/match.

References

http://archives.neohapsis.com/archives/fulldisclosure/2012-12/0012.html
http://archives.neohapsis.com/archives/fulldisclosure/2012-12/0012.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-6066