Lucene search

K
cvelistMitreCVELIST:CVE-2009-0362
HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-0362

2022-10-0316:24:09
mitre
www.cve.org
fail2ban 0.8.3
wuftpd.conf
filter
vulnerability
denial of service
remote attackers
reverse-resolved dns
ip address
cve-2009-0362

6.3 Medium

AI Score

Confidence

Low

0.19 Low

EPSS

Percentile

96.3%

filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service (forced authentication failures) via a crafted reverse-resolved DNS name (rhost) entry that contains a substring that is interpreted as an IP address, a different vulnerability than CVE-2007-4321.

6.3 Medium

AI Score

Confidence

Low

0.19 Low

EPSS

Percentile

96.3%