Debian/fail2ban: unknown
server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified
Action: Upgrade fail2ban to 0.8.6-3wheezy1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.6-3wheezy1 | - |
Fixed versions
| 0.8.6-3wheezy1 |
Sources
- osv: DEBIAN-CVE-2012-5642#Debian:14/fail2ban
- https://security-tracker.debian.org/tracker/CVE-2012-5642
published · modified · JSON