PT-2007-1113 · Denyhosts · Denyhosts
Publicado
2007-08-14
·
Atualizado
2017-07-29
·
CVE-2007-4323
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
DenyHosts version 2.6
DenyHosts versions prior to 2.6-r1
Description:
The issue allows remote attackers to cause a denial of service by adding arbitrary IP addresses to the sshd log file. This can be achieved by logging in via ssh with a client protocol version identification containing an IP address string. The vulnerability may lead to a disruption of confidentiality, integrity, and availability of protected information.
Recommendations:
For DenyHosts version 2.6, update to a version newer than 2.6-r1 to resolve the issue.
For DenyHosts versions prior to 2.6-r1, update to a version newer than 2.6-r1 to resolve the issue.
As a temporary workaround, consider restricting access to the sshd log file to minimize the risk of exploitation.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Denyhosts