Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

fail2ban fail2ban 0.7.8 vulnerabilities and exploits

(subscribe to this query)
4.7
CVSSv2
CVE-2009-5023
The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4) mynetwatchman.conf actions in action.d/ in Fail2ban prior to 0.8.5 allows local users to write to arbitrary files via a symlink attack on temporary files with predictable names, as demonstrated by /tmp/...
Fail2ban Fail2ban 0.7.8Fail2ban Fail2ban 0.7.7Fail2ban Fail2ban 0.7.6Fail2ban Fail2ban 0.7.5Fail2ban Fail2ban 0.4.1Fail2ban Fail2ban 0.4.0Fail2ban Fail2ban 0.3.1Fail2ban Fail2ban 0.3.0Fail2ban Fail2ban 0.8.1Fail2ban Fail2ban 0.7.9Fail2ban Fail2ban 0.7.4Fail2ban Fail2ban 0.7.2Fail2ban Fail2ban 0.5.3Fail2ban Fail2ban 0.5.1Fail2ban Fail2ban 0.1.1Fail2ban Fail2banFail2ban Fail2ban 0.8.3Fail2ban Fail2ban 0.7.0Fail2ban Fail2ban 0.6.1Fail2ban Fail2ban 0.6.0Fail2ban Fail2ban 0.5.5Fail2ban Fail2ban 0.8.2
7.5
CVSSv2
CVE-2012-5642
server/action.py in Fail2ban prior to 0.8.8 does not properly handle the content of the matches tag, which might allow remote malicious users to trigger unsafe behavior in a custom action file via unspecified symbols in this content.
Fail2ban Fail2ban 0.8.4Fail2ban Fail2ban 0.8.3Fail2ban Fail2ban 0.7.6Fail2ban Fail2ban 0.7.5Fail2ban Fail2ban 0.5.5Fail2ban Fail2ban 0.5.4Fail2ban Fail2ban 0.8.6Fail2ban Fail2ban 0.8.5Fail2ban Fail2ban 0.7.8Fail2ban Fail2ban 0.7.7Fail2ban Fail2ban 0.6.1Fail2ban Fail2ban 0.6.0Fail2ban Fail2ban 0.4.1Fail2ban Fail2ban 0.4.0Fail2ban Fail2banFail2ban Fail2ban 0.8.7Fail2ban Fail2ban 0.8.0Fail2ban Fail2ban 0.7.9Fail2ban Fail2ban 0.7.1Fail2ban Fail2ban 0.7.0Fail2ban Fail2ban 0.5.1Fail2ban Fail2ban 0.5.0
5
CVSSv2
CVE-2013-7176
config/filter.d/postfix.conf in the postfix filter in Fail2ban prior to 0.8.11 allows remote malicious users to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression.
Fail2ban Fail2ban 0.8.3Fail2ban Fail2ban 0.8.2Fail2ban Fail2ban 0.7.5Fail2ban Fail2ban 0.7.4Fail2ban Fail2ban 0.5.5Fail2ban Fail2ban 0.5.4Fail2ban Fail2ban 0.5.3Fail2ban Fail2ban 0.3.0Fail2ban Fail2ban 0.1.2Fail2ban Fail2ban 0.8.5Fail2ban Fail2ban 0.8.4Fail2ban Fail2ban 0.7.7Fail2ban Fail2ban 0.7.6Fail2ban Fail2ban 0.6.1Fail2ban Fail2ban 0.6.0Fail2ban Fail2ban 0.4.0Fail2ban Fail2ban 0.3.1Fail2ban Fail2ban 0.8.7Fail2ban Fail2ban 0.8.6Fail2ban Fail2ban 0.7.9Fail2ban Fail2ban 0.7.8Fail2ban Fail2ban 0.7.1
5
CVSSv2
CVE-2013-7177
config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban prior to 0.8.11 allows remote malicious users to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression.
Fail2ban Fail2ban 0.8.7.1Fail2ban Fail2ban 0.8.7Fail2ban Fail2ban 0.7.9Fail2ban Fail2ban 0.7.8Fail2ban Fail2ban 0.7.1Fail2ban Fail2ban 0.7.0Fail2ban Fail2ban 0.5.1Fail2ban Fail2ban 0.5.0Fail2ban Fail2banFail2ban Fail2ban 0.8.9Fail2ban Fail2ban 0.8.8Fail2ban Fail2ban 0.8.2Fail2ban Fail2ban 0.8.1Fail2ban Fail2ban 0.8.0Fail2ban Fail2ban 0.7.3Fail2ban Fail2ban 0.7.2Fail2ban Fail2ban 0.5.3Fail2ban Fail2ban 0.5.2Fail2ban Fail2ban 0.1.1Fail2ban Fail2ban 0.1.0Fail2ban Fail2ban 0.8.4Fail2ban Fail2ban 0.8.3
5
CVSSv2
CVE-2013-2178
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban prior to 0.8.10 do not properly validate log messages, which allows remote malicious users to block arbitrary IP addresses via certain messages in a request.
Fail2ban Fail2ban 0.8.5Fail2ban Fail2ban 0.8.4Fail2ban Fail2ban 0.7.7Fail2ban Fail2ban 0.7.6Fail2ban Fail2ban 0.7.5Fail2ban Fail2ban 0.6.0Fail2ban Fail2ban 0.5.5Fail2ban Fail2ban 0.4.0Fail2ban Fail2ban 0.3.1Fail2ban Fail2banFail2ban Fail2ban 0.8.7.1Fail2ban Fail2ban 0.8.1Fail2ban Fail2ban 0.8.0Fail2ban Fail2ban 0.7.2Fail2ban Fail2ban 0.7.1Fail2ban Fail2ban 0.5.2Fail2ban Fail2ban 0.5.1Fail2ban Fail2ban 0.1.1Fail2ban Fail2ban 0.1.0Fail2ban Fail2ban 0.8.7Fail2ban Fail2ban 0.8.6Fail2ban Fail2ban 0.7.9
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook