CVE

Id
26122  
CVE No.
CVE-2007-2765  
Status
Candidate  
Description
blockhosts.py in BlockHosts before 2.0.3 does not properly parse daemon log files, which allows remote attackers to add arbitrary deny entries to the /etc/hosts.allow file and cause a denial of service by adding arbitrary IP addresses to a daemon log file, as demonstrated by logging in through ssh using a login name containing certain strings with an IP address, which is not properly handled by a regular expression, a related issue to CVE-2006-6301.  
Phase
Assigned (20070518)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
262986 26122 CVE-2007-2765 CONFIRM:http://www.aczoom.com/tools/blockhosts/CHANGES  View
262987 26122 CVE-2007-2765 BID:24090  View
262988 26122 CVE-2007-2765 URL:http://www.securityfocus.com/bid/24090  View
262989 26122 CVE-2007-2765 VUPEN:ADV-2007-1906  View
262990 26122 CVE-2007-2765 URL:http://www.vupen.com/english/advisories/2007/1906  View
262991 26122 CVE-2007-2765 OSVDB:36516  View
262992 26122 CVE-2007-2765 URL:http://osvdb.org/36516  View
262993 26122 CVE-2007-2765 SECUNIA:25352  View
262994 26122 CVE-2007-2765 URL:http://secunia.com/advisories/25352  View
262995 26122 CVE-2007-2765 XF:blockhosts-daemonlog-dos(34426)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55184 JVNDB-2007-003876 Hydrax の BES におけるファイルシステムの内容を一覧にされる脆弱性 OPeNDAP 4 (Hydrax) の BES には、ファイルシステムの内容を一覧にされる、および重要な情報を取得される脆弱性が存在します。 CVE-2007-2767 26122 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003876.html  View