Unscored severity · published Dec 4, 2012
CVE-2012-5975
The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when…
–
CVSS
35.9%
EPSS
No
On KEV
Description
The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when old-style password authentication is enabled, allows remote attackers to bypass authentication via a crafted session involving entry of blank passwords, as demonstrated by a root login session from a modified OpenSSH client with an added input_userauth_passwd_changereq call in sshconnect2.c.
Exploitation
Is it being used?
Exploit prediction (EPSS)35.9% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Tectia Server · Ssh
6.0.4; 6.0.5; 6.0.6; 6.0.7; 6.0.8; 6.0.9; +29 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5975
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5975
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2012-12/0013.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2012-12/0065.html
www.exploit-db.com
http://www.exploit-db.com/exploits/23082/
Exploit
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ssh/tectia_passwd_changereq.rb
More from Tectia Server
8.8
CVE-2021-27891
SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation
7.8
CVE-2021-27892
SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation
7.0
CVE-2021-27893
SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in nonstandard conditions
3.7
CVE-2008-5161
Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and…
–
CVE-2007-5616
ssh-signer in SSH Tectia Client and Server 5.x before 5.2.4, and 5.3.x before 5.3.6, on Unix and Linux allows local users to gain privileges via unspecified vectors