Remote IP Address Blocking Vulnerability in Fail2ban's Cyrus-IMAP Filter
CVE-2013-7177

Currently unrated

Key Information:

Vendor: Fail2ban
Status: Fail2ban
Vendor: CVE Published:; 1 February 2014

What is CVE-2013-7177?

A flaw in the config/filter.d/cyrus-imap.conf file of the Cyrus-IMAP filter in Fail2ban allows remote attackers to manipulate the system. By crafting an email address that exploits an inadequately developed regular expression, an attacker can trigger the blocking of arbitrary IP addresses. This vulnerability poses a risk to the integrity of the fail2ban security measures as it can be exploited to prevent legitimate users from accessing services.

References

http://www.kb.cert.org/vuls/id/686662

third-party-advisoryx_refsource_CERT-VN

https://github.com/fail2ban/fail2ban/commit/bd175f026737d...

x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-updates/2014-03/msg000...

vendor-advisoryx_refsource_SUSE

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 1, 2014
Vulnerability Reserved
Dec 19, 2013

CVE-2013-7177 Data

JSON