CVE-2012-6067

Freeftpd < 1.0.11 - Authentication Bypass

Title source: rule

Description

freeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a crafted SFTP session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.

References (1)

[Third Party Advisory] http://archives.neohapsis.com/archives/fulldisclosure/2012-12/0011.html

Scores

EPSS 0.0101

EPSS Percentile 76.9%

Classification

CWE

CWE-287

Status draft

Affected Products (11)

freeftpd/freeftpd < 1.0.11

freeftpd/freeftpd

Timeline

Published Dec 04, 2012

Tracked Since Feb 18, 2026