QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-6302

Back to search

CVE-2006-6302

Published: Dec 6, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containing certain strings with an IP address.

VendorProductVersions

n/a

n/a

affected
n/a

References

GLSA-200702-05
vendor-advisory
x_refsource_GENTOO
23237
third-party-advisory
x_refsource_SECUNIA
24184
third-party-advisory
x_refsource_SECUNIA
fail2ban-log-message-dos(30739)
vdb-entry
x_refsource_XF
21469
vdb-entry
x_refsource_BID
ADV-2006-4877
vdb-entry
x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now