CVE-2006-6302 - CVE House
Back to Database
Status published Medium CVE-2006-6302

fail2ban 0.7.4 and earlier does not properly parse sshd log...

Vulnerability Description

fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containing certain strings with an IP address.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-6302

Credits & Attribution

No credits recorded in the NVD database.

References

More from fail2ban

View All →
CVE-2021-32749
Possible RCE vulnerability in mailing action using mailutils (mail-whois)
Medium 6.1
CVE-2013-7177
config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows...
Medium 5
CVE-2013-7176
config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows...
Medium 5
CVE-2013-2178
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before...
Medium 5
CVE-2012-5642
server/action.py in Fail2ban before 0.8.8 does not properly handle the...
High 7.5

Affected Vendor

Affected Software

fail2ban
Vulnerable Versions:
0

Timeline

Official Publish: December 6th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.