{"vulnerability": "cve-2012-10060", "sightings": [{"uuid": "ffcbcbac-d2cf-4456-85a6-1e21f2338c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10060", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ssh/sysax_ssh_username.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "56f3dbd1-2414-46ee-a889-01a0eddbec10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10060", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "a895630f-55ef-4f15-a415-b7a63ebd82d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10060", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ssh/sysax_ssh_username.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Craig Freyman\", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Sysax's SSH service.  By\\n          supplying a long username, the SSH server will copy that data on the stack\\n          without proper bounds checking, therefore allowing remote code execution\\n          under the context of the user.  Please note that previous versions\\n          (before 5.53) are also affected by this bug.\", \"disclosure_date\": \"2012-02-27\", \"fullname\": \"exploit/windows/ssh/sysax_ssh_username\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Sysax 5.53 SSH Username Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/ssh/sysax_ssh_username.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/ssh/sysax_ssh_username\", \"references\": [\"CVE-2012-10060\", \"OSVDB-79689\", \"URL-http://www.pwnag3.com/2012/02/sysax-multi-server-ssh-username-exploit.html\", \"EDB-18535\"], \"rport\": 22, \"session_types\": false, \"targets\": [\"Sysax 5.53 on Win XP SP3 / Win2k3 SP0\", \"Sysax 5.53 on Win2K3 SP1/SP2\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:35.612650Z"}]}