CVE-2009-5023

Published: Jun 10, 2014Modified: May 6, 2026

4.7

Vector

AV:L/AC:M/Au:N/C:N/I:C/A:N

Exploitability: 3.4 / Impact: 6.9

Source: NVD

Description

The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4) mynetwatchman.conf actions in action.d/ in Fail2ban before 0.8.5 allows local users to write to arbitrary files via a symlink attack on temporary files with predictable names, as demonstrated by /tmp/fail2ban-mail.txt.

Affected (30)

Products: Fail2ban: Fail2ban

Fail2ban

1 product

Fail2ban

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Fail2ban Fail2ban	Up to 0.8.4
Fail2ban Fail2ban	Version 0.1.0
Fail2ban Fail2ban	Version 0.1.1
Fail2ban Fail2ban	Version 0.1.2
Fail2ban Fail2ban	Version 0.3.0
Fail2ban Fail2ban	Version 0.3.1
Fail2ban Fail2ban	Version 0.4.0
Fail2ban Fail2ban	Version 0.4.1
Fail2ban Fail2ban	Version 0.5.0
Fail2ban Fail2ban	Version 0.5.1
Fail2ban Fail2ban	Version 0.5.2
Fail2ban Fail2ban	Version 0.5.3
Fail2ban Fail2ban	Version 0.5.4
Fail2ban Fail2ban	Version 0.5.5
Fail2ban Fail2ban	Version 0.6.0
Fail2ban Fail2ban	Version 0.6.1
Fail2ban Fail2ban	Version 0.7.0
Fail2ban Fail2ban	Version 0.7.1
Fail2ban Fail2ban	Version 0.7.2
Fail2ban Fail2ban	Version 0.7.3
Fail2ban Fail2ban	Version 0.7.4
Fail2ban Fail2ban	Version 0.7.5
Fail2ban Fail2ban	Version 0.7.6
Fail2ban Fail2ban	Version 0.7.7
Fail2ban Fail2ban	Version 0.7.8
Fail2ban Fail2ban	Version 0.7.9
Fail2ban Fail2ban	Version 0.8.0
Fail2ban Fail2ban	Version 0.8.1
Fail2ban Fail2ban	Version 0.8.2
Fail2ban Fail2ban	Version 0.8.3