FreeSSHd freeSSHd.exe 远程身份验证绕过漏洞

🗓️ 26 Dec 2012 00:00:00Reported by RootType

FreeSSHd Remote Authentication Bypass ZERODAY vulnerabilit

Reporter	Title	Published	Views	Family All 12
0day.today	FreeSSHd 1.2.6 Authentication Bypass Vulnerability	15 Jan 201300:00	–	zdt
Circl	CVE-2012-6066	2 Dec 201200:00	–	circl
CVE	CVE-2012-6066	4 Dec 201223:00	–	cve
Cvelist	CVE-2012-6066	4 Dec 201223:00	–	cvelist
Exploit DB	freeSSHd 1.2.6 - Authentication Bypass (Metasploit)	15 Jan 201300:00	–	exploitdb
Tenable Nessus	freeFTPd / freeSSHd SFTP Authentication Bypass	11 Dec 201200:00	–	nessus
Metasploit	Freesshd Authentication Bypass	13 Jan 201316:08	–	metasploit
NVD	CVE-2012-6066	4 Dec 201223:55	–	nvd
Packet Storm	FreeSSHd 1.2.6 Authentication Bypass	15 Jan 201300:00	–	packetstorm
Prion	Authentication flaw	4 Dec 201223:55	–	prion


                                                FreeSSHD all version Remote Authentication Bypass ZERODAY
Discovered &amp; Exploited by Kingcope
Year 2011

http://www.exploit-db.com/sploits/23080.zip

Run like:

ssh.exe -l&lt;valid username&gt; &lt;host&gt;

valid username might be:

root
admin
administrator
webadmin
sysadmin
netadmin
guest
user
web
test
ssh
sftp
ftp

or anything you can imagine.


The vulnerable banner of the most recent version is:

SSH-2.0-WeOnlyDo 2.1.3


For your pleasure,

KingcopeFreeSSHD all version Remote Authentication Bypass ZERODAY
Discovered &amp; Exploited by Kingcope
Year 2011

Run like:

ssh.exe -l&lt;valid username&gt; &lt;host&gt;

valid username might be:

root
admin
administrator
webadmin
sysadmin
netadmin
guest
user
web
test
ssh
sftp
ftp

or anything you can imagine.


The vulnerable banner of the most recent version is:

SSH-2.0-WeOnlyDo 2.1.3


For your pleasure,

Kingcope

26 Dec 2012 00:00Current

6.4Medium risk

Vulners AI Score6.4

EPSS0.75871