PT-2007-1113 · Denyhosts · Denyhosts

Published 2007-08-14 · Updated 2017-07-29 · CVE-2007-4323

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: DenyHosts version 2.6 DenyHosts versions prior to 2.6-r1

Description: The issue allows remote attackers to cause a denial of service by adding arbitrary IP addresses to the sshd log file. This can be achieved by logging in via ssh with a client protocol version identification containing an IP address string. The vulnerability may lead to a disruption of confidentiality, integrity, and availability of protected information.

Recommendations: For DenyHosts version 2.6, update to a version newer than 2.6-r1 to resolve the issue. For DenyHosts versions prior to 2.6-r1, update to a version newer than 2.6-r1 to resolve the issue. As a temporary workaround, consider restricting access to the sshd log file to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-09595

CVE-2007-4323

Affected Products

Denyhosts

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2007-4323 · Security Note
• http://security.gentoo.org/glsa/glsa-200710-14.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09595 · Security Note
• http://osvdb.org/42482 · Note
• http://ossec.net/en/attacking-loganalysis.html · Note
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=244943 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37199 · Note
• http://bugs.gentoo.org/show_bug.cgi?id=181213 · Note
• http://securityfocus.com/bid/26061 · Note
• http://secunia.com/advisories/27254 · Note