Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

fail2ban vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2013-7177
config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban prior to 0.8.11 allows remote malicious users to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression.
Fail2ban Fail2ban 0.8.7.1Fail2ban Fail2ban 0.8.7Fail2ban Fail2ban 0.7.9Fail2ban Fail2ban 0.7.8Fail2ban Fail2ban 0.7.1Fail2ban Fail2ban 0.7.0Fail2ban Fail2ban 0.5.1Fail2ban Fail2ban 0.5.0Fail2ban Fail2banFail2ban Fail2ban 0.8.9Fail2ban Fail2ban 0.8.8Fail2ban Fail2ban 0.8.2Fail2ban Fail2ban 0.8.1Fail2ban Fail2ban 0.8.0Fail2ban Fail2ban 0.7.3Fail2ban Fail2ban 0.7.2Fail2ban Fail2ban 0.5.3Fail2ban Fail2ban 0.5.2Fail2ban Fail2ban 0.1.1Fail2ban Fail2ban 0.1.0Fail2ban Fail2ban 0.8.4Fail2ban Fail2ban 0.8.3
5
CVSSv2
CVE-2013-7176
config/filter.d/postfix.conf in the postfix filter in Fail2ban prior to 0.8.11 allows remote malicious users to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression.
Fail2ban Fail2ban 0.8.3Fail2ban Fail2ban 0.8.2Fail2ban Fail2ban 0.7.5Fail2ban Fail2ban 0.7.4Fail2ban Fail2ban 0.5.5Fail2ban Fail2ban 0.5.4Fail2ban Fail2ban 0.5.3Fail2ban Fail2ban 0.3.0Fail2ban Fail2ban 0.1.2Fail2ban Fail2ban 0.8.5Fail2ban Fail2ban 0.8.4Fail2ban Fail2ban 0.7.7Fail2ban Fail2ban 0.7.6Fail2ban Fail2ban 0.6.1Fail2ban Fail2ban 0.6.0Fail2ban Fail2ban 0.4.0Fail2ban Fail2ban 0.3.1Fail2ban Fail2ban 0.8.7Fail2ban Fail2ban 0.8.6Fail2ban Fail2ban 0.7.9Fail2ban Fail2ban 0.7.8Fail2ban Fail2ban 0.7.1
7.5
CVSSv2
CVE-2012-5642
server/action.py in Fail2ban prior to 0.8.8 does not properly handle the content of the matches tag, which might allow remote malicious users to trigger unsafe behavior in a custom action file via unspecified symbols in this content.
Fail2ban Fail2ban 0.8.4Fail2ban Fail2ban 0.8.3Fail2ban Fail2ban 0.7.6Fail2ban Fail2ban 0.7.5Fail2ban Fail2ban 0.5.5Fail2ban Fail2ban 0.5.4Fail2ban Fail2ban 0.8.6Fail2ban Fail2ban 0.8.5Fail2ban Fail2ban 0.7.8Fail2ban Fail2ban 0.7.7Fail2ban Fail2ban 0.6.1Fail2ban Fail2ban 0.6.0Fail2ban Fail2ban 0.4.1Fail2ban Fail2ban 0.4.0Fail2ban Fail2banFail2ban Fail2ban 0.8.7Fail2ban Fail2ban 0.8.0Fail2ban Fail2ban 0.7.9Fail2ban Fail2ban 0.7.1Fail2ban Fail2ban 0.7.0Fail2ban Fail2ban 0.5.1Fail2ban Fail2ban 0.5.0
5
CVSSv2
CVE-2013-2178
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban prior to 0.8.10 do not properly validate log messages, which allows remote malicious users to block arbitrary IP addresses via certain messages in a request.
Fail2ban Fail2ban 0.8.5Fail2ban Fail2ban 0.8.4Fail2ban Fail2ban 0.7.7Fail2ban Fail2ban 0.7.6Fail2ban Fail2ban 0.7.5Fail2ban Fail2ban 0.6.0Fail2ban Fail2ban 0.5.5Fail2ban Fail2ban 0.4.0Fail2ban Fail2ban 0.3.1Fail2ban Fail2banFail2ban Fail2ban 0.8.7.1Fail2ban Fail2ban 0.8.1Fail2ban Fail2ban 0.8.0Fail2ban Fail2ban 0.7.2Fail2ban Fail2ban 0.7.1Fail2ban Fail2ban 0.5.2Fail2ban Fail2ban 0.5.1Fail2ban Fail2ban 0.1.1Fail2ban Fail2ban 0.1.0Fail2ban Fail2ban 0.8.7Fail2ban Fail2ban 0.8.6Fail2ban Fail2ban 0.7.9
4.7
CVSSv2
CVE-2009-5023
The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4) mynetwatchman.conf actions in action.d/ in Fail2ban prior to 0.8.5 allows local users to write to arbitrary files via a symlink attack on temporary files with predictable names, as demonstrated by /tmp/...
Fail2ban Fail2ban 0.7.8Fail2ban Fail2ban 0.7.7Fail2ban Fail2ban 0.7.6Fail2ban Fail2ban 0.7.5Fail2ban Fail2ban 0.4.1Fail2ban Fail2ban 0.4.0Fail2ban Fail2ban 0.3.1Fail2ban Fail2ban 0.3.0Fail2ban Fail2ban 0.8.1Fail2ban Fail2ban 0.7.9Fail2ban Fail2ban 0.7.4Fail2ban Fail2ban 0.7.2Fail2ban Fail2ban 0.5.3Fail2ban Fail2ban 0.5.1Fail2ban Fail2ban 0.1.1Fail2ban Fail2banFail2ban Fail2ban 0.8.3Fail2ban Fail2ban 0.7.0Fail2ban Fail2ban 0.6.1Fail2ban Fail2ban 0.6.0Fail2ban Fail2ban 0.5.5Fail2ban Fail2ban 0.8.2
5
CVSSv2
CVE-2006-6302
fail2ban 0.7.4 and previous versions does not properly parse sshd log files, which allows remote malicious users to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in v...
Fail2ban Fail2ban
6.8
CVSSv2
CVE-2007-4321
fail2ban 0.8 and previous versions does not properly parse sshd log files, which allows remote malicious users to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via...
Fail2ban Fail2ban 0.8
4
CVSSv2
CVE-2009-0362
filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote malicious users to cause a denial of service (forced authentication failures) via a crafted reverse-resolved DNS name (rhost) entry that contains a substring that is interpreted as an I...
Fail2ban Fail2ban 0.8.3
6.8
CVSSv2
CVE-2021-32749
fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 up to and including 0.10.6, and 0.11.0 up to and including 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailing action mail-who...
Fail2ban Fail2banFedoraproject Fedora 34Fedoraproject Fedora 35
NA
CVE-2022-38337
When aborting a SFTP connection, MobaXterm before v22.1 sends a hardcoded password to the server. The server treats this as an invalid login attempt which can result in a Denial of Service (DoS) for the user if services like fail2ban are used.
Mobatek Mobaxterm
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook