Lucene search

K

[email protected]NVD:CVE-2013-2178

HistoryAug 28, 2013 - 11:55 p.m.

CVE-2013-2178

2013-08-2823:55:10

CWE-20

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

Low

0.017 Low

EPSS

Percentile

87.7%

The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP addresses via certain messages in a request.

Affected configurations

NVD

Node

fail2banfail2banRange≤0.8.9

OR

fail2banfail2banMatch0.1.0

OR

fail2banfail2banMatch0.1.1

OR

fail2banfail2banMatch0.1.2

OR

fail2banfail2banMatch0.3.0

OR

fail2banfail2banMatch0.3.1

OR

fail2banfail2banMatch0.4.0

OR

fail2banfail2banMatch0.4.1

OR

fail2banfail2banMatch0.5.0

OR

fail2banfail2banMatch0.5.1

OR

fail2banfail2banMatch0.5.2

OR

fail2banfail2banMatch0.5.3

OR

fail2banfail2banMatch0.5.4

OR

fail2banfail2banMatch0.5.5

OR

fail2banfail2banMatch0.6.0

OR

fail2banfail2banMatch0.6.1

OR

fail2banfail2banMatch0.7.0

OR

fail2banfail2banMatch0.7.1

OR

fail2banfail2banMatch0.7.2

OR

fail2banfail2banMatch0.7.3

OR

fail2banfail2banMatch0.7.4

OR

fail2banfail2banMatch0.7.5

OR

fail2banfail2banMatch0.7.6

OR

fail2banfail2banMatch0.7.7

OR

fail2banfail2banMatch0.7.8

OR

fail2banfail2banMatch0.7.9

OR

fail2banfail2banMatch0.8.0

OR

fail2banfail2banMatch0.8.1

OR

fail2banfail2banMatch0.8.2

OR

fail2banfail2banMatch0.8.3

OR

fail2banfail2banMatch0.8.4

OR

fail2banfail2banMatch0.8.5

OR

fail2banfail2banMatch0.8.6

OR

fail2banfail2banMatch0.8.7

OR

fail2banfail2banMatch0.8.7.1

OR

fail2banfail2banMatch0.8.8

References

lists.opensuse.org/opensuse-updates/2014-03/msg00021.html

www.debian.org/security/2013/dsa-2708

www.openwall.com/lists/oss-security/2013/06/13/7

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17338

raw.github.com/fail2ban/fail2ban/master/ChangeLog

vndh.net/note:fail2ban-089-denial-service

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

Low

0.017 Low

EPSS

Percentile

87.7%

Related for NVD:CVE-2013-2178

cve1 nessus7 openvas7 osv1 debian1 amazon1 prion1 securityvulns2 mageia1 debiancve1 ubuntucve1 cvelist1 fedora1 gentoo1