medium5.0Public exploit code
CVE-2013-6890
denyhosts 2.6 uses an incorrect regular expression when analyzing authentication logs, which allows remote attackers to cause a denial of service (incorrect bl…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DenyHosts - 'regex.py' Remote Denial of Service2013-12-19 · dos · linux · Verified
Impact
denyhosts 2.6 uses an incorrect regular expression when analyzing authentication logs, which allows remote attackers to cause a denial of service (incorrect block of IP addresses) via crafted login names.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Debian Linux | Versions 6.0, 7.0, 7.1 |
| Fedoraproject | Fedora | All versions |
| Phil Schwartz | Denyhosts | Version 2.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/oss-sec/2013/q4/535
- http://secunia.com/advisories/56239
- http://www.debian.org/security/2013/dsa-2826
- https://bugzilla.redhat.com/show_bug.cgi?id=1045982
- http://seclists.org/oss-sec/2013/q4/535
- http://secunia.com/advisories/56239
- http://www.debian.org/security/2013/dsa-2826
- https://bugzilla.redhat.com/show_bug.cgi?id=1045982