CVE-2012-10060

CVE-2012-10060 describes a critical stack-based buffer overflow vulnerability affecting Sysax Multi Server versions prior to 5.55. A remote attacker can achieve remote code execution by providing an excessively long username during SSH authentication, exploiting the lack of proper bounds checking. This vulnerability carries a CVSS score of 9.8 (CRITICAL) due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, a Metasploit module exists, indicating readily available exploit code, despite minimal community discussion or media coverage.