CVE-2012-5642

Published: Dec 31, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this content.

Affected (34)

Products: Fail2ban: Fail2ban

Fail2ban

1 product

Fail2ban

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Fail2ban Fail2ban	Up to 0.8.7.1
Fail2ban Fail2ban	Version 0.1.0
Fail2ban Fail2ban	Version 0.1.1
Fail2ban Fail2ban	Version 0.1.2
Fail2ban Fail2ban	Version 0.3.0
Fail2ban Fail2ban	Version 0.3.1
Fail2ban Fail2ban	Version 0.4.0
Fail2ban Fail2ban	Version 0.4.1
Fail2ban Fail2ban	Version 0.5.0
Fail2ban Fail2ban	Version 0.5.1
Fail2ban Fail2ban	Version 0.5.2
Fail2ban Fail2ban	Version 0.5.3
Fail2ban Fail2ban	Version 0.5.4
Fail2ban Fail2ban	Version 0.5.5
Fail2ban Fail2ban	Version 0.6.0
Fail2ban Fail2ban	Version 0.6.1
Fail2ban Fail2ban	Version 0.7.0
Fail2ban Fail2ban	Version 0.7.1
Fail2ban Fail2ban	Version 0.7.2
Fail2ban Fail2ban	Version 0.7.3
Fail2ban Fail2ban	Version 0.7.4
Fail2ban Fail2ban	Version 0.7.5
Fail2ban Fail2ban	Version 0.7.6
Fail2ban Fail2ban	Version 0.7.7
Fail2ban Fail2ban	Version 0.7.8
Fail2ban Fail2ban	Version 0.7.9
Fail2ban Fail2ban	Version 0.8.0
Fail2ban Fail2ban	Version 0.8.1
Fail2ban Fail2ban	Version 0.8.2
Fail2ban Fail2ban	Version 0.8.3
Fail2ban Fail2ban	Version 0.8.4
Fail2ban Fail2ban	Version 0.8.5
Fail2ban Fail2ban	Version 0.8.6
Fail2ban Fail2ban	Version 0.8.7