CVE-2007-5715

{"id": "CVE-2007-5715", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-10-30T19:46:00.000", "references": [{"url": "http://bugs.gentoo.org/show_bug.cgi?id=181213", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/45298", "source": "cve@mitre.org"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=237449", "source": "cve@mitre.org"}, {"url": "http://bugs.gentoo.org/show_bug.cgi?id=181213", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/45298", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=237449", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-16"}]}], "descriptions": [{"lang": "en", "value": "DenyHosts 2.6 processes OpenSSH sshd \"not listed in AllowUsers\" log messages with an incorrect regular expression that does not match an IP address, which might allow remote attackers to avoid detection and blocking when making invalid login attempts with a username not present in AllowUsers, as demonstrated by the root username, a different vulnerability than CVE-2007-4323."}, {"lang": "es", "value": "DenyHosts 2.6 procesa mensajes de registro (log) de OpenSSH sshd del tipo \"no listado en usuarios permitidos\" (not listed in AllowUsers) con una expresi\u00f3n regular incorrecta que no coincide con una direcci\u00f3n IP, lo cual podr\u00eda permitir a atacantes remotos evitar la detecci\u00f3n y el bloqueo cuando hacen intentos de acceso inv\u00e1lidos con un nombre de usuario no presente en AllowUsers, como se ha demostrado usando el nombre de usuario root, una vulnerabilidad diferente de CVE-2007-4323."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:denyhosts:denyhosts:2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "672AF5F3-AAAD-4F43-A83D-F5F81AD1DBA8"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}