CVE-2012-5975: The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6....

Security readout for executives and security teams

CVE-2012-5975 is a remote authentication bypass in SSH Tectia Server on UNIX and Linux. If a vulnerable version has old-style password authentication enabled, an attacker may log in without valid credentials using a crafted authentication sequence involving blank passwords. Because SSH often protects privileged access, exposed affected servers should be treated as urgent. Exposure is limited to legacy SSH Tectia Server deployments in the listed versions, on UNIX/Linux, with old-style password authentication enabled. Internet-facing SSH services increase business risk. The source bundle does not provide normalized CPEs or a vendor-fixed version. Treat externally reachable affected servers as critical. This is an authentication bypass against remote access infrastructure, with public exploit material available. Confirm exposure quickly, reduce network reachability, and move affected systems to vendor-supported fixed versions or compensating controls. Mitigation focus: Inventory SSH Tectia Server versions across UNIX and Linux systems.; Disable old-style password authentication where operationally possible.; Restrict SSH access to trusted management networks or VPNs..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.