PT-2013-1140 · Denyhosts · Denyhosts

Ratul Gupta · Published 2013-12-23 · Updated 2014-06-25 · CVE-2013-6890

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions denyhosts versions prior to 2.6-r9 denyhosts version 2.6

Description The issue allows remote attackers to cause a denial of service, specifically an incorrect block of IP addresses, via crafted login names. This is due to an incorrect regular expression used when analyzing authentication logs. The vulnerability can be exploited remotely, potentially leading to disruption of protected information.

Recommendations For denyhosts versions prior to 2.6-r9, update to version 2.6-r9 or later to resolve the issue. For denyhosts version 2.6, consider applying configuration changes to mitigate the risk of denial of service attacks until a patch is available.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2015-04121

BDU:2015-09754

CVE-2013-6890

DSA-2826-1

MGASA-2014-0080

Affected Products

Denyhosts

References · 15

• 🔥 https://exploit-db.com/exploits/38909 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-6890 · Security Note
• http://debian.org/security/2013/dsa-2826 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0080.html · Security Note
• https://osv.dev/vulnerability/MGASA-2014-0080 · Vendor Advisory
• http://secunia.com/advisories/56239 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6890 · Security Note
• https://bdu.fstec.ru/vul/2015-09754 · Security Note
• https://bdu.fstec.ru/vul/2015-04121 · Security Note
• http://seclists.org/oss-sec/2013/q4/535 · Note
• http://debian.org/security/dsa-2826 · Note
• https://bugs.mageia.org/show_bug.cgi?id=12092 · Note
• https://lists.debian.org/debian-security-announce/2014/msg00018.html · Note
• http://security.gentoo.org/glsa/glsa-201406-23.xml · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1045982 · Note