NVD

Id
46745  
Name
CVE-2012-5642  
Description
server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this content.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-12-31  
Modified Date
2013-12-05  
Seq
2012-5642  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
234177 46745 CVE-2012-5642 openSUSE-SU-2013:0566  View
234178 46745 CVE-2012-5642 openSUSE-SU-2013:0567  View
234179 46745 CVE-2012-5642 [fail2ban-users] 20121206 0.8.8 release  View
234180 46745 CVE-2012-5642 MDVSA-2013:078  View
234181 46745 CVE-2012-5642 [oss-security] 20121217 Re: CVE request: fail2ban 0.8.8 fixes an input variable quoting flaw on <matches> content  View
234182 46745 CVE-2012-5642 https://bugs.gentoo.org/show_bug.cgi?id=447572  View
234183 46745 CVE-2012-5642 https://bugzilla.redhat.com/show_bug.cgi?id=887914  View
234184 46745 CVE-2012-5642 https://github.com/fail2ban/fail2ban/commit/83109bc  View
234185 46745 CVE-2012-5642 https://raw.github.com/fail2ban/fail2ban/master/ChangeLog  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30144 JVNDB-2012-005851 Fail2ban の server/action.py における安全でない動作を誘発される脆弱性 Fail2ban の server/action.py は、matches タグのコンテンツを適切に処理しないため、カスタムアクションファイル (custom action file) により、安全でない動作を誘発される脆弱性が存在します。 CVE-2012-5642 58880 CVE-2012-5642 46745 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005851.html 2012-12-06 2013-01-07 View