Lucene search

K
nvd[email protected]NVD:CVE-2012-6063
HistoryNov 30, 2012 - 10:55 p.m.

CVE-2012-6063

2012-11-3022:55:01
CWE-399
web.nvd.nist.gov
1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.111 Low

EPSS

Percentile

95.2%

Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors, a different vector than CVE-2012-4559.

Affected configurations

NVD
Node
libsshlibsshRange0.5.2
OR
libsshlibsshMatch0.4.7
OR
libsshlibsshMatch0.4.8
OR
libsshlibsshMatch0.5.0
OR
libsshlibsshMatch0.5.0rc1
OR
libsshlibsshMatch0.5.1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.111 Low

EPSS

Percentile

95.2%