CVE-2007-5715 Security feature bypass in n/a
Remote attackers can bypass DenyHosts blocking mechanisms for invalid login attempts due to a flawed regular expression in log processing.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-5715?
CVE-2007-5715 is a medium-severity vulnerability in n/a, published on 30 Oct 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
DenyHosts 2.6 processes OpenSSH sshd "not listed in AllowUsers" log messages with an incorrect regular expression that does not match an IP address, which might allow remote attackers to avoid detection and blocking when making invalid login attempts with a username not present in AllowUsers, as demonstrated by the root username, a different vulnerability than CVE-2007-4323.
Weakness: CWE-16
Which versions are affected by CVE-2007-5715?
It affects 1 product.
Products include Denyhosts Denyhosts.
How do I fix CVE-2007-5715?
No fix has been published for CVE-2007-5715 yet. Limit exposure of the affected software until one is available.
Is CVE-2007-5715 being exploited?
There is no known exploitation of CVE-2007-5715 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-7qq6-xfqx-v945.