Vulnerabilities > AC Zoom

DATE CVE VULNERABILITY TITLE RISK
2007-08-14 CVE-2007-4322 Denial-Of-Service vulnerability in AC Zoom Blockhosts 2.0.4
BlockHosts before 2.0.4 does not properly parse (1) sshd and (2) vsftpd log files, which allows remote attackers to add arbitrary deny entries to the /etc/hosts.allow file and cause a denial of service by adding arbitrary IP addresses to a daemon log file, as demonstrated by connecting through ssh with a client protocol version identification containing an IP address string, or connecting through ftp with a username containing an IP address string, different vectors than CVE-2007-2765.
network
ac-zoom
6.8
2007-05-18 CVE-2007-2765 Remote Denial of Service vulnerability in BlockHosts
blockhosts.py in BlockHosts before 2.0.3 does not properly parse daemon log files, which allows remote attackers to add arbitrary deny entries to the /etc/hosts.allow file and cause a denial of service by adding arbitrary IP addresses to a daemon log file, as demonstrated by logging in through ssh using a login name containing certain strings with an IP address, which is not properly handled by a regular expression, a related issue to CVE-2006-6301.
network
low complexity
ac-zoom
6.8