CVE-2007-4321: Medium severity fail2ban fail2ban vulnerability
fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a client protocol version identification containing an IP address string, a different vector than CVE-2006-6302.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4321?
CVE-2007-4321 is classified as a moderate severity vulnerability.
How do I fix CVE-2007-4321?
To fix CVE-2007-4321, update fail2ban to version 0.8.1 or later.
What is the impact of CVE-2007-4321 on my system?
CVE-2007-4321 can allow remote attackers to manipulate the /etc/hosts.deny file, leading to potential denial of service.
Which versions of fail2ban are affected by CVE-2007-4321?
Fail2ban versions 0.8 and earlier are affected by CVE-2007-4321.
Is CVE-2007-4321 related to SSH vulnerabilities?
Yes, CVE-2007-4321 exploits vulnerabilities in sshd log parsing to manipulate access control.