Debian/fail2ban: unknown
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block
Action: Upgrade fail2ban to 0.8.10-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.10-1 | - |
Fixed versions
| 0.8.10-1 |
Sources
- osv: DEBIAN-CVE-2013-2178#Debian:13/fail2ban
- https://security-tracker.debian.org/tracker/CVE-2013-2178
published · modified · JSON