PT-2007-5508 · Blockhost · Blockhost

Publicado 2007-08-14 · Atualizado 2012-10-31 · CVE-2007-4322

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BlockHosts versions prior to 2.0.4

Description The issue allows remote attackers to cause a denial of service by adding arbitrary IP addresses to a daemon log file. This can be achieved by connecting through ssh with a client protocol version identification containing an IP address string, or connecting through ftp with a username containing an IP address string.

Recommendations For versions prior to 2.0.4, update to version 2.0.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the ssh and ftp services to minimize the risk of exploitation. Avoid using usernames or client protocol version identifications that contain IP address strings in the affected services until the issue is resolved.

Correção

Identificadores relacionados

CVE-2007-4322

Produtos afetados

Blockhost

Referências · 4

• http://ossec.net/en/attacking-loganalysis.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4322 · Nota de Segurança
• http://aczoom.com/tools/blockhosts/CHANGES · Nota
• http://osvdb.org/36515 · Nota