(SSH.com Communications) SSH Tectia (SSH < 2.0-6.1.9.95 / Tectia 6.1.9.95) - Remote Authentication Bypass
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | Tectia SSH Server Authentication Bypass | 6 Dec 200900:00 | – | nessus |
| Tectia SSH Server Authentication Bypass | 5 Dec 201200:00 | – | nessus |
 | CVE-2012-5975 | 2 Dec 201200:00 | – | circl |
 | CVE-2012-5975 | 4 Dec 201223:00 | – | cve |
 | CVE-2012-5975 | 4 Dec 201223:00 | – | cvelist |
 | (SSH.com Communications) SSH Tectia - USERAUTH Change Request Password Reset (Metasploit) | 5 Dec 201200:00 | – | exploitdb |
 | Tectia SSH USERAUTH Change Request Password Reset Vulnerability | 4 Dec 201215:25 | – | metasploit |
 | CVE-2012-5975 | 4 Dec 201223:55 | – | nvd |
 | Authentication flaw | 4 Dec 201223:55 | – | prion |
 | CVE-2012-5975 | 22 May 202503:46 | – | redhatcve |
10
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/23082.zip
SSH Tectia Remote Authentication Bypass
Tectia is the commercial OpenSSH solution. The product can be found at:
www.tectia.com
An attacker in the possession of a valid username of an SSH Tectia installation running on UNIX (verified: AIX/Linux) can login without a password.
The bug is in the SSH USERAUTH CHANGE REQUEST routines which are there to allow a user to change their password. A bug in this code allows an attacker to login without a password by forcing a password change request prior to authentication.
The vulnerability has been verified on UNIX operating systems and at least on this (recent) versions:
• SSH-2.0-6.1.9.95 SSH Tectia Server (Latest available version from www.tectia.com)
• SSH-2.0-6.0.11.5 SSH Tectia Server
A default installation on Linux (version 6.1.9.95 of Tectia) is vulnerable to the attack.
KingcopeData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
05 Dec 2012 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 29.3
EPSS0.35874