PT-2013-1140 · Denyhosts · Denyhosts

Ratul Gupta

·

Publicado

2013-12-23

·

Atualizado

2014-06-25

·

CVE-2013-6890

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions denyhosts versions prior to 2.6-r9 denyhosts version 2.6
Description The issue allows remote attackers to cause a denial of service, specifically an incorrect block of IP addresses, via crafted login names. This is due to an incorrect regular expression used when analyzing authentication logs. The vulnerability can be exploited remotely, potentially leading to disruption of protected information.
Recommendations For denyhosts versions prior to 2.6-r9, update to version 2.6-r9 or later to resolve the issue. For denyhosts version 2.6, consider applying configuration changes to mitigate the risk of denial of service attacks until a patch is available.

Exploit

Correção

Improper Authentication

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

BDU:2015-04121
BDU:2015-09754
CVE-2013-6890
DSA-2826-1
MGASA-2014-0080

Produtos afetados

Denyhosts