Lucene search

MitreCVE-2007-5715

HistoryOct 30, 2007 - 7:46 p.m.

CVE-2007-5715

2007-10-3019:46:00

CWE-16

mitre

web.nvd.nist.gov

cve-2007-5715

denyhosts

openssh

sshd

allowusers

invalid login attempts

remote attackers

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.035

Percentile

91.7%

JSON

DenyHosts 2.6 processes OpenSSH sshd “not listed in AllowUsers” log messages with an incorrect regular expression that does not match an IP address, which might allow remote attackers to avoid detection and blocking when making invalid login attempts with a username not present in AllowUsers, as demonstrated by the root username, a different vulnerability than CVE-2007-4323.

Affected configurations

Nvd

Node

denyhostsdenyhostsMatch2.6

VendorProductVersionCPE
denyhostsdenyhosts2.6cpe:2.3:a:denyhosts:denyhosts:2.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
denyhosts	denyhosts	2.6	cpe:2.3:a:denyhosts:denyhosts:2.6:::::::*

References

bugs.gentoo.org/show_bug.cgi?id=181213

osvdb.org/45298

bugzilla.redhat.com/show_bug.cgi?id=237449

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.035

Percentile

91.7%

JSON

Related for CVE-2007-5715