CVE-2007-5715 - CVE House
Back to Database
Status published Medium CVE-2007-5715

DenyHosts 2.6 processes OpenSSH sshd "not listed in AllowUsers" log...

Vulnerability Description

DenyHosts 2.6 processes OpenSSH sshd "not listed in AllowUsers" log messages with an incorrect regular expression that does not match an IP address, which might allow remote attackers to avoid detection and blocking when making invalid login attempts with a username not present in AllowUsers, as demonstrated by the root username, a different vulnerability than CVE-2007-4323.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-5715

Credits & Attribution

No credits recorded in the NVD database.

References

More from denyhosts

View All →
CVE-2007-4323
DenyHosts 2.6 does not properly parse sshd log files, which...
Medium 6.8
CVE-2006-6301
DenyHosts 2.5 does not properly parse sshd log files, which...
Medium 5

Affected Vendor

Affected Software

denyhosts
Vulnerable Versions:
2.6

Timeline

Official Publish: October 30th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.