20121201 SSH.com Communications SSH Tectia Authentication Bypass Remote Zeroday Exploit

20121203 Re: SSH.com Communications SSH Tectia Authentication Bypass Remote Zeroday Exploit (king cope)

23082

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ssh/tectia_passwd_changereq.rb

The version of Tectia SSH Server running on the remote host is affected by an authentication bypass vulnerability.  A remote, unauthenticated attacker can bypass authentication by sending a specially crafted request, allowing the attacker to authenticate as root.

The software is only vulnerable when running on Unix or Unix-like operating systems.

Version of Tectia SSH server earlier than 6.3.3 / 6.2.6 / 6.1.13 / 6.0.20 are vulnerable. A remote, unauthenticated attacker can bypass authentication by sending a specially crafted request, allowing the attackerto authenticate as root.

The software is only vulnerable when running on Unix or Unix-like operating systems.

ID	Name	Product	Family	Severity
63156	Tectia SSH Server Authentication Bypass	Nessus	Gain a shell remotely	critical
6642	Tectia SSH Server Authentication Bypass	Nessus Network Monitor	SSH	critical

CVE-2012-5975

high

Tenable Plugins

critical

critical