Priority LOW 30
In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf) accepts an "on <token>" suffix after the host address.
Vulnerabilities
10 records
TI-2021-12417 CVE-2021-32749
Possible RCE vulnerability in mailing action using mailutils (mail-whois)
Priority MEDIUM 41
fail2ban is a daemon to ban hosts that cause multiple authentication errors.
TI-2009-04779 CVE-2009-5023 · GHSA-h7g6-frrr-69cx
The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4)…
Priority LOW 22
The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4) mynetwatchman.conf actions in action.d/ in Fail2ban before 0.8.5 allows local users to write to arbitrary files via a symlink attack on tempor…
TI-2013-05868 CVE-2013-7177 · GHSA-9rh6-j3cg-gfgj
config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows…
Priority LOW 29
config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly design…
TI-2013-05867 CVE-2013-7176 · GHSA-c3p6-cwjh-4h46
config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows…
Priority LOW 29
config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed reg…
TI-2013-01945 CVE-2013-2178 · GHSA-4339-77hj-xqhj
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf…
Priority LOW 26
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP address…
TI-2012-04743 CVE-2012-5642 · GHSA-mxxq-p5rj-2jcc
server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the…
Priority LOW 38
server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this con…
TI-2009-00342 CVE-2009-0362 · GHSA-rc77-w9xr-6vvf
filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows…
Priority LOW 21
filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service (forced authentication failures) via a crafted reverse-resolved DNS name (rhost) entry…
TI-2007-04181 CVE-2007-4321 · GHSA-5jfx-9p58-q8pj
fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote…
Priority LOW 39
fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd…
TI-2006-06066 CVE-2006-6302 · GHSA-j744-4wh9-3vxg
fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote…
Priority LOW 26
fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the ss…