CVE-2012-6067

CVE-2012-6067 describes a critical authentication bypass vulnerability in freeFTPd through version 1.0.11, specifically affecting the freeFTPd.exe component. This flaw allows remote attackers to gain unauthorized access to the system by crafting a malicious SFTP session, as demonstrated with modified OpenSSH client files. With a CVSS score of 10.0, this vulnerability is highly severe, indicating a network-based attack with low complexity that can lead to complete compromise of confidentiality, integrity, and availability without requiring authentication. Despite its critical severity, there is no evidence of active exploitation, publicly available exploit code in common repositories like Metasploit or ExploitDB, or significant community discussion or media coverage.