PT-2007-6700 · Openssh+1 · Openssh+1

Published 2007-10-30 · Updated 2008-11-15 · CVE-2007-5715

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions DenyHosts version 2.6

Description The issue arises from DenyHosts 2.6 processing OpenSSH sshd log messages with an incorrect regular expression, potentially allowing remote attackers to bypass detection when making invalid login attempts with a username not listed in AllowUsers. This could be achieved by using a username such as 'root' that is not present in the AllowUsers configuration.

Recommendations For DenyHosts version 2.6, consider updating the regular expression used to process OpenSSH sshd log messages to correctly match IP addresses and improve detection of invalid login attempts. As a temporary workaround, closely monitor login attempts and manually block suspicious IP addresses to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2007-5715

Affected Products

Denyhosts

Openssh

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-5715 · Security Note
• http://bugs.gentoo.org/show_bug.cgi?id=181213 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=237449 · Note
• http://osvdb.org/45298 · Note