CVE-2009-5023: Medium severity fail2ban fail2ban vulnerability
The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4) mynetwatchman.conf actions in action.d/ in Fail2ban before 0.8.5 allows local users to write to arbitrary files via a symlink attack on temporary files with predictable names, as demonstrated by /tmp/fail2ban-mail.txt.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-5023?
CVE-2009-5023 is considered a medium severity vulnerability due to its potential for local file manipulation via symlink attacks.
How do I fix CVE-2009-5023?
To mitigate CVE-2009-5023, upgrade Fail2ban to version 0.8.5 or later, which resolves the symlink vulnerability.
Which versions of Fail2ban are affected by CVE-2009-5023?
CVE-2009-5023 affects Fail2ban versions prior to 0.8.5.
What exploitation method is used in CVE-2009-5023?
CVE-2009-5023 can be exploited through a symlink attack on temporary files with predictable names.
Is CVE-2009-5023 a remote or local vulnerability?
CVE-2009-5023 is a local vulnerability, allowing local users to exploit it.