5 matches found
PT-2022-13682
Name of the Vulnerable Software and Affected Versions The Blackhole for Bad Bots WordPress plugin versions prior to 3.3.2 Description The issue allows IP addresses to be spoofed by manipulating headers such as CF-CONNECTING-IP and CLIENT-IP, which can lead to blocking arbitrary IP addresses. This...
PT-2014-3278
Name of the Vulnerable Software and Affected Versions Fail2ban versions prior to 0.8.11 Description The issue allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression in the postfix filter...
PT-2014-3279
Name of the Vulnerable Software and Affected Versions Fail2ban versions prior to 0.8.11 Description The issue arises from a crafted e-mail address that matches an improperly designed regular expression in the cyrus-imap filter, allowing remote attackers to trigger the blocking of an arbitrary IP...
CVE-2013-7176: Improper Input Validation
config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression...
CVE-2013-7177: Improper Input Validation
config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression...