CVE-2012-6066

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 39.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-12-04 · updated 2026-06-16
Weakness: CWE-287

Description

freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.

Affected products

freeSSHd: through 1.2.6; 1.2.1, 1.2.2

References

http://archives.neohapsis.com/archives/fulldisclosure/2012-12/0012.html
http://archives.neohapsis.com/archives/fulldisclosure/2012-12/0012.html

Get alerted when CVE-2012-6066 or the next vulnerability affects your stack