← Vulnerability feed

Vulnerability record · CVE-2012-10060 · published 13 August 2025

CVE-2012-10060: Sysax multi server stack-based buffer overflow vulnerability

Sysax · Multi Server

Sysax Multi Server versions prior to 5.55 contain a stack-based buffer overflow in its SSH service. When a remote attacker supplies an overly long username during authentication, the server copies the input to a fixed-size stack buffer without proper bounds checking. This allows remote code execution under the context of the service.

9.3 CVSS 4.0 Critical EPSS 3.0% · top 13.1% CWE-121 · Stack-based buffer overflow
9.3CVSS 4.0 base score
3.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References, 5 tagged exploit
16 Jun 2026Last modified by NVD

Description

Sysax Multi Server versions prior to 5.55 contain a stack-based buffer overflow in its SSH service. When a remote attacker supplies an overly long username during authentication, the server copies the input to a fixed-size stack buffer without proper bounds checking. This allows remote code execution under the context of the service.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://advisories.checkpoint.com/defense/advisories/public/2012/cpai-23-sepc.html Third Party Advisory
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ssh/sysax_ssh_username.rb ExploitThird Party Advisory
https://web.archive.org/web/20120302203344/http://www.pwnag3.com/2012/02/sysax-multi-server-ssh-username-exploit.html ExploitThird Party Advisory
https://www.exploit-db.com/exploits/18535 ExploitVDB Entry
https://www.exploit-db.com/exploits/18557 ExploitVDB Entry
https://www.sysax.com/ Product
https://www.vulncheck.com/advisories/sysax-multi-server-ssh-username-buffer-overflow Third Party Advisory
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ssh/sysax_ssh_username.rb ExploitThird Party Advisory

Track CVE-2012-10060 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.0CVE-2009-4790Sysax multi server path traversal vulnerabilityMultiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote authenticated users to read or modify arbitrary files via crafted…EPSS 3.9%8.8CVE-2020-13229Sysax multi server vulnerabilityAn issue was discovered in Sysax Multi Server 6.90. A session can be hijacked if one observes the sid value in any /scgi URI, because it is an authen…EPSS 1.6%8.7CVE-2013-10065Sysax multi server vulnerabilityA denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A specially crafted SSH key exchange packet can trigg…EPSS 1.6%7.5CVE-2024-53458Sysax multi server uncontrolled resource consumption vulnerabilitySysax Multi Server 6.99 is vulnerable to a denial of service (DoS) condition when processing specially crafted SSH packets.EPSS 0.53%7.1CVE-2012-6530Sysax Multi Server HTTP stack buffer overflow enables remote code executionSysax Multi Server before 5.52 contains a stack-based buffer overflow that is reachable when HTTP is enabled. A remote authenticated user holding the…EPSS 46%analysed6.5CVE-2020-23574Sysax multi server memory buffer overflow vulnerabilityWhen uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the uploadfile_name1.htm form to a le…EPSS 0.95%6.1CVE-2020-13228Sysax multi server cross-site scripting vulnerabilityAn issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter.EPSS 3.1%5.4CVE-2024-53459Sysax multi server cross-site scripting vulnerabilitySysax Multi Server 6.99 is vulnerable to Cross Site Scripting (XSS) via the /scgi?sid parameter.EPSS 0.31%

Source: NIST National Vulnerability Database (record CVE-2012-10060), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.