漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
DenyHosts 2.6 processes OpenSSH sshd "not listed in AllowUsers" log messages with an incorrect regular expression that does not match an IP address, which might allow remote attackers to avoid detection and blocking when making invalid login attempts with a username not present in AllowUsers, as demonstrated by the root username, a different vulnerability than CVE-2007-4323.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DenyHosts OpenSSH sshd中配置错误漏洞
Vulnerability Description
DenyHosts 2.6版本处理OpenSSH sshd中具有一个错误的常规表达式并且与IP地址不相匹配的"没在AllowUsers中列出" 的log 信息,这会允许远程攻击者当制造AllowUsers中的一个无效的用户名登录,如b根用户名,避开检测和阻挡。
CVSS Information
N/A
Vulnerability Type
N/A