CVE

Id
58885  
CVE No.
CVE-2012-5642  
Status
Candidate  
Description
server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this content.  
Phase
Assigned (20121024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
602196 58885 CVE-2012-5642 MLIST:[fail2ban-users] 20121206 0.8.8 release  View
602197 58885 CVE-2012-5642 URL:http://sourceforge.net/mailarchive/message.php?msg_id=30193056  View
602198 58885 CVE-2012-5642 MLIST:[oss-security] 20121217 Re: CVE request: fail2ban 0.8.8 fixes an input variable quoting flaw on <matches> content  View
602199 58885 CVE-2012-5642 URL:http://www.openwall.com/lists/oss-security/2012/12/17/2  View
602200 58885 CVE-2012-5642 CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=447572  View
602201 58885 CVE-2012-5642 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=887914  View
602202 58885 CVE-2012-5642 CONFIRM:https://github.com/fail2ban/fail2ban/commit/83109bc  View
602203 58885 CVE-2012-5642 CONFIRM:https://raw.github.com/fail2ban/fail2ban/master/ChangeLog  View
602204 58885 CVE-2012-5642 MANDRIVA:MDVSA-2013:078  View
602205 58885 CVE-2012-5642 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:078  View
602206 58885 CVE-2012-5642 SUSE:openSUSE-SU-2013:0566  View
602207 58885 CVE-2012-5642 URL:http://lists.opensuse.org/opensuse-updates/2013-04/msg00001.html  View
602208 58885 CVE-2012-5642 SUSE:openSUSE-SU-2013:0567  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20114 JVNDB-2013-001689 Red Hat OpenShift Origin におけるオープンリダイレクトの脆弱性 Red Hat OpenShift Origin の node-util/www/html/restorer.php には、オープンリダイレクトの脆弱性が存在します。 CVE-2012-5647 58885 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001689.html  View