Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

fail2ban: denial of service

Package(s):

fail2ban

CVE #(s):

CVE-2007-4321

Created:

January 10, 2008

Updated:

January 16, 2008

Description:

From the Debian alert: Daniel B. Cid discovered that fail2ban, a tool to block IP addresses that cause login failures, is too liberal about parsing SSH log files, allowing an attacker to block any IP address.

Alerts:

Debian

DSA-1456-1

2008-01-09

(Log in to post comments)