CVE-2006-6301
DenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add...
DenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containing certain strings with an IP address, which is not properly handled by a regular expression.
Exploit likelihood
What each source reports
NVD Score used
DenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containing certain strings with an IP address, which is not properly handled by a regular expression.
- Record
CVE-2006-6301- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
DenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containing certain strings with an IP address, which is not properly handled by a regular expression.
- Record
CVE-2006-6301- Updated
- 2026-11-02
EUVDEUVD-2006-6284 No score
DenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containing certain strings with an IP address, which is not properly handled by a regular expression.
- Record
EUVD-2006-6284- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6xhr-5mv6-f4jf No score
DenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add...
DenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containing certain strings with an IP address, which is not properly handled by a regular expression.
- Record
GHSA-6xhr-5mv6-f4jf- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6301 is a medium vulnerability (CVSS 5.0) in Denyhosts, published December 6, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.89%, the 79th percentile. No source names a fixed version.
References
bugs.gentoo.org/show_bug.cgi?id=157163
vupen.com/english/advisories/2006/4876
secunia.com/advisories/23236
exchange.xforce.ibmcloud.com/vulnerabilities/30761
securityfocus.com/bid/21468
security.gentoo.org/glsa/glsa-200701-01.xml
nvd.nist.gov/vuln/detail/CVE-2006-6301
github.com/advisories/GHSA-6xhr-5mv6-f4jf