CVE-2007-5715

Severity CVSS v4.0:
Pending analysis
Type:
CWE-16 Configuration Errors
Publication date:
30/10/2007
Last modified:
09/04/2025

Description

DenyHosts 2.6 processes OpenSSH sshd "not listed in AllowUsers" log messages with an incorrect regular expression that does not match an IP address, which might allow remote attackers to avoid detection and blocking when making invalid login attempts with a username not present in AllowUsers, as demonstrated by the root username, a different vulnerability than CVE-2007-4323.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:denyhosts:denyhosts:2.6:*:*:*:*:*:*:*