Detections
Analytics
GLSA-201406-03 : Fail2ban: Multiple vulnerabilities
medium Nessus Plugin ID 74260
Language:
Synopsis
The remote Gentoo host is missing one or more security-related patches.Description
The remote host is affected by the vulnerability described in GLSA-201406-03 (Fail2ban: Multiple vulnerabilities)Multiple vulnerabilities have been discovered in Fail2ban. Please review the CVE identifiers referenced below for details.
Impact :
A remote attacker could send a crafted URL to a website which, when parsed by Fail2ban, would deny a specific IP address. Also, errors in regular expressions within certain filters can cause arbitrary IP addresses to be banned. Furthermore, a local attacker could perform symlink attacks to overwrite arbitrary files with the privileges of the user running the application.
Workaround :
There is no known workaround at this time.
Solution
All Fail2ban users should upgrade to the latest version:# emerge --sync # emerge --ask --oneshot --verbose '>=net-analyzer/fail2ban-0.8.12
See Also
Plugin Details
Severity: Medium
ID: 74260
File Name: gentoo_GLSA-201406-03.nasl
Version: 1.4
Type: local
Family: Gentoo Local Security Checks
Published: 6/2/2014
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: p-cpe:/a:gentoo:linux:fail2ban, cpe:/o:gentoo:linux
Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/1/2014
Reference Information
CVE: CVE-2009-5023, CVE-2013-2178, CVE-2013-7176
GLSA: 201406-03